{
  "@id": "urn:uuid:d9e4ed93-de31-4712-8d29-31f528101765",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 37,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T15:44:00.110412+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T14:57:45.485772+00:00",
      "status_notes": "Vulnerability CVE-2019-0199 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2019-0199"
      },
      "action_statement": "Vulnerability CVE-2019-0199 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-13934 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2020-13934"
      },
      "action_statement": "Vulnerability CVE-2020-13934 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-13943 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2020-13943"
      },
      "action_statement": "Vulnerability CVE-2020-13943 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-17527 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2020-17527"
      },
      "action_statement": "Vulnerability CVE-2020-17527 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-30T15:44:00.110412+00:00",
      "status_notes": "Vulnerability CVE-2021-25122 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2021-25122"
      },
      "action_statement": "Vulnerability CVE-2021-25122 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:12:12.887949+00:00",
      "status_notes": "Vulnerability CVE-2022-42252 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2022-42252"
      },
      "action_statement": "Vulnerability CVE-2022-42252 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:04:11.478044+00:00",
      "status_notes": "Vulnerability CVE-2022-45143 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2022-45143"
      },
      "action_statement": "Vulnerability CVE-2022-45143 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:11:34.688190+00:00",
      "status_notes": "Vulnerability CVE-2023-24998 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2023-24998"
      },
      "action_statement": "Vulnerability CVE-2023-24998 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:11:36.374923+00:00",
      "status_notes": "Vulnerability CVE-2023-42794 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2023-42794"
      },
      "action_statement": "Vulnerability CVE-2023-42794 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:22:18.734162+00:00",
      "status_notes": "Vulnerability CVE-2023-42795 does not affect version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm. not_affected \u2014 CVE-2023-42795 is NOT present in the target. The vulnerability involves incomplete cleanup during recycling of internal objects, which could leak information between requests. The upstream Apache Tomcat project fixed this in version 10.1.14 (released October 2023) by adding robust error handling to ensure all recycling steps complete even if exceptions occur. The target version 10.1.42 (release...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-42795"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-42795 is NOT present in the target. The vulnerability involves incomplete cleanup during recycling of internal objects, which could leak information between requests. The upstream Apache Tomcat project fixed this in version 10.1.14 (released October 2023) by adding robust error handling to ensure all recycling steps complete even if exceptions occur. The target version 10.1.42 (release..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T19:10:05.488784+00:00",
      "status_notes": "Vulnerability CVE-2023-45648 does not affect version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm. not_affected \u2014 Apache Tomcat 10.1.42 is not affected by CVE-2023-45648. The vulnerability involves improper parsing of HTTP trailer headers that could lead to request smuggling. The fix, which validates that trailer header names contain only token characters and values do not contain control characters (except HT/tab), was already present in the upstream Apache Tomcat 10.1.42 release when TuxCare onboarded it...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-45648"
      },
      "impact_statement": "not_affected \u2014 Apache Tomcat 10.1.42 is not affected by CVE-2023-45648. The vulnerability involves improper parsing of HTTP trailer headers that could lead to request smuggling. The fix, which validates that trailer header names contain only token characters and values do not contain control characters (except HT/tab), was already present in the upstream Apache Tomcat 10.1.42 release when TuxCare onboarded it..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:14:49.853815+00:00",
      "status_notes": "Vulnerability CVE-2023-46589 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2023-46589"
      },
      "action_statement": "Vulnerability CVE-2023-46589 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2024-21733 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2024-21733"
      },
      "action_statement": "Vulnerability CVE-2024-21733 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-24549 does not affect version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm. 10.1.42 is not vulnerable. The issue is fixed in 10.1.19, and 10.1.42 is later than 10.1.19, so this version already includes the fix.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-24549"
      },
      "impact_statement": "10.1.42 is not vulnerable. The issue is fixed in 10.1.19, and 10.1.42 is later than 10.1.19, so this version already includes the fix."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-34750 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2024-34750"
      },
      "action_statement": "Vulnerability CVE-2024-34750 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-38286 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2024-38286"
      },
      "action_statement": "Vulnerability CVE-2024-38286 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2025-31650 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2025-31650"
      },
      "action_statement": "Vulnerability CVE-2025-31650 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2025-48989"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:14:49.853815+00:00",
      "status_notes": "Vulnerability CVE-2025-52434 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2025-52434"
      },
      "action_statement": "Vulnerability CVE-2025-52434 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2025-53506"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-66614 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2025-66614"
      },
      "action_statement": "Vulnerability CVE-2025-66614 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24733 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-24733"
      },
      "action_statement": "Vulnerability CVE-2026-24733 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24734 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.10.",
      "vulnerability": {
        "name": "CVE-2026-24734"
      },
      "action_statement": "Vulnerability CVE-2026-24734 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.10."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24880 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.2.",
      "vulnerability": {
        "name": "CVE-2026-24880"
      },
      "action_statement": "Vulnerability CVE-2026-24880 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.2."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-29145 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2026-29145"
      },
      "action_statement": "Vulnerability CVE-2026-29145 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-34500 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2026-34500"
      },
      "action_statement": "Vulnerability CVE-2026-34500 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41293 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.8.",
      "vulnerability": {
        "name": "CVE-2026-41293"
      },
      "action_statement": "Vulnerability CVE-2026-41293 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm, and is fixed in 10.1.42-tuxcare.8."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@10.1.42-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T21:50:56.656209+00:00",
      "status_notes": "Vulnerability CVE-2026-53434 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm.",
      "vulnerability": {
        "name": "CVE-2026-53434"
      },
      "action_statement": "Vulnerability CVE-2026-53434 affects version 10.1.42-tuxcare.1 of org.apache.tomcat:tomcat-coyote-ffm."
    }
  ]
}