{
  "@id": "urn:uuid:27424bfc-16e2-44f5-8a9d-c5c74a72bb55",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 31,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T14:49:00.106665+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2014-0095 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2014-0095"
      },
      "action_statement": "Vulnerability CVE-2014-0095 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T04:08:51.772780+00:00",
      "status_notes": "Vulnerability CVE-2016-6816 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2016-6816"
      },
      "action_statement": "Vulnerability CVE-2016-6816 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2017-5651 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2017-5651"
      },
      "action_statement": "Vulnerability CVE-2017-5651 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2019-0199"
      },
      "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-13934 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. CVE-2020-13934 is not present in Tomcat 9.0.100. The vulnerability (h2c direct connection causing HTTP/1.1 processor leak leading to pool exhaustion) was fixed in upstream Apache Tomcat 9.0.37 (June 30, 2020) via commit 172977f04a authored by Mark Thomas (markt@apache.org). The fix adds release(processor) before creating the h2c upgrade processor and changes control flow to ensure proper cleanup. Since version 9.0.100 (released Feb 13, 2025) is later than 9.0.37, it inherently includes this upstream fix. The vulnerable code pattern is not present in the target.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-13934"
      },
      "impact_statement": "CVE-2020-13934 is not present in Tomcat 9.0.100. The vulnerability (h2c direct connection causing HTTP/1.1 processor leak leading to pool exhaustion) was fixed in upstream Apache Tomcat 9.0.37 (June 30, 2020) via commit 172977f04a authored by Mark Thomas (markt@apache.org). The fix adds release(processor) before creating the h2c upgrade processor and changes control flow to ensure proper cleanup. Since version 9.0.100 (released Feb 13, 2025) is later than 9.0.37, it inherently includes this upstream fix. The vulnerable code pattern is not present in the target."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-13943 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. already_fixed \u2014 CVE-2020-13943 has been fixed in this repository. The fix (commit 9d7def063b and backports 55911430df, 1bbc650cbc) moved the max concurrent streams check from headersStart() to headersEnd(), preventing HTTP/2 header confusion when the concurrent streams limit is exceeded.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-13943"
      },
      "impact_statement": "already_fixed \u2014 CVE-2020-13943 has been fixed in this repository. The fix (commit 9d7def063b and backports 55911430df, 1bbc650cbc) moved the max concurrent streams check from headersStart() to headersEnd(), preventing HTTP/2 header confusion when the concurrent streams limit is exceeded."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-17527 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2020-17527"
      },
      "action_statement": "Vulnerability CVE-2020-17527 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T00:08:54.384014+00:00",
      "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2021-25122"
      },
      "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:12:12.887949+00:00",
      "status_notes": "Vulnerability CVE-2022-42252 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2022-42252"
      },
      "action_statement": "Vulnerability CVE-2022-42252 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2022-45143"
      },
      "action_statement": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T21:11:34.688190+00:00",
      "status_notes": "Vulnerability CVE-2023-24998 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2023-24998"
      },
      "action_statement": "Vulnerability CVE-2023-24998 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T01:46:20.750358+00:00",
      "status_notes": "Vulnerability CVE-2023-28709 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2023-28709"
      },
      "action_statement": "Vulnerability CVE-2023-28709 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2023-34981 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2023-34981"
      },
      "action_statement": "Vulnerability CVE-2023-34981 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:40:55.741562+00:00",
      "status_notes": "Vulnerability CVE-2023-42794 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. not_affected \u2014 Target Apache Tomcat 9.0.100 is not affected by CVE-2023-42794. The vulnerability (incomplete cleanup of uploaded files when streams are not closed) was fixed by upstream Apache in version 9.0.81 via commit 43b882b8a5 by Mark Thomas. This fix is present in the target's codebase, shipped in the upstream release 9.0.100. The finalize() method that ensures cleanup of temporary files via garbage co...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-42794"
      },
      "impact_statement": "not_affected \u2014 Target Apache Tomcat 9.0.100 is not affected by CVE-2023-42794. The vulnerability (incomplete cleanup of uploaded files when streams are not closed) was fixed by upstream Apache in version 9.0.81 via commit 43b882b8a5 by Mark Thomas. This fix is present in the target's codebase, shipped in the upstream release 9.0.100. The finalize() method that ensures cleanup of temporary files via garbage co..."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:23:53.811682+00:00",
      "status_notes": "Vulnerability CVE-2023-42795 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. not_affected \u2014 CVE-2023-42795 fix was already present in upstream Apache Tomcat 9.0.100 release. The vulnerability affects versions 9.0.0-M1 through 9.0.80; the fix shipped in 9.0.81 onwards per upstream. Target version 9.0.100 already contains commit 44d05d75d6 by markt@apache.org which wraps all vulnerable recycle() cleanup operations in try-catch blocks to prevent incomplete cleanup when errors occur. No T...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-42795"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-42795 fix was already present in upstream Apache Tomcat 9.0.100 release. The vulnerability affects versions 9.0.0-M1 through 9.0.80; the fix shipped in 9.0.81 onwards per upstream. Target version 9.0.100 already contains commit 44d05d75d6 by markt@apache.org which wraps all vulnerable recycle() cleanup operations in try-catch blocks to prevent incomplete cleanup when errors occur. No T..."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2023-44487 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2023-44487"
      },
      "action_statement": "Vulnerability CVE-2023-44487 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T19:07:12.211534+00:00",
      "status_notes": "Vulnerability CVE-2023-45648 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. not_affected \u2014 CVE-2023-45648 is not present in Tomcat 9.0.100. The vulnerability (improper parsing of HTTP trailer headers in chunked transfer encoding requests, enabling request smuggling) was fixed in upstream Apache Tomcat through architectural refactoring that introduced the HttpHeaderParser class with proper validation of trailer header names and values. This upstream fix was already present in the 9.0....",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2023-45648"
      },
      "impact_statement": "not_affected \u2014 CVE-2023-45648 is not present in Tomcat 9.0.100. The vulnerability (improper parsing of HTTP trailer headers in chunked transfer encoding requests, enabling request smuggling) was fixed in upstream Apache Tomcat through architectural refactoring that introduced the HttpHeaderParser class with proper validation of trailer header names and values. This upstream fix was already present in the 9.0...."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:14:49.853815+00:00",
      "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2023-46589"
      },
      "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2024-21733"
      },
      "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-24549 does not affect version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote. CVE-2024-24549 affects Tomcat 9.0.x up to 9.0.82; fixed in 9.0.83+. Target 9.0.100 already contains the fix, so this version is not affected.",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-24549"
      },
      "impact_statement": "CVE-2024-24549 affects Tomcat 9.0.x up to 9.0.82; fixed in 9.0.83+. Target 9.0.100 already contains the fix, so this version is not affected."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-34750 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2024-34750"
      },
      "action_statement": "Vulnerability CVE-2024-34750 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T18:12:53.572239+00:00",
      "status_notes": "Vulnerability CVE-2024-38286 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2024-38286"
      },
      "action_statement": "Vulnerability CVE-2024-38286 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2024-52317 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2024-52317"
      },
      "action_statement": "Vulnerability CVE-2024-52317 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-31650 is fixed in version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2025-31650"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2025-48989"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-52434 is fixed in version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2025-52434"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2025-53506"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-66614 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2025-66614"
      },
      "action_statement": "Vulnerability CVE-2025-66614 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24733 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.3.",
      "vulnerability": {
        "name": "CVE-2026-24733"
      },
      "action_statement": "Vulnerability CVE-2026-24733 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.3."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-24734"
      },
      "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-24880 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.6.",
      "vulnerability": {
        "name": "CVE-2026-24880"
      },
      "action_statement": "Vulnerability CVE-2026-24880 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote, and is fixed in 9.0.100-tuxcare.6."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2026-29129 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-29129"
      },
      "action_statement": "Vulnerability CVE-2026-29129 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-32990"
      },
      "action_statement": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-41293"
      },
      "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-23T21:50:56.656209+00:00",
      "status_notes": "Vulnerability CVE-2026-53434 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-53434"
      },
      "action_statement": "Vulnerability CVE-2026-53434 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.100-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-29T00:29:56.875680+00:00",
      "status_notes": "Vulnerability CVE-2026-65637 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote.",
      "vulnerability": {
        "name": "CVE-2026-65637"
      },
      "action_statement": "Vulnerability CVE-2026-65637 affects version 9.0.100-tuxcare.1 of org.apache.tomcat:tomcat-coyote."
    }
  ]
}