{
  "@id": "urn:uuid:e83d2d2e-47a2-4517-a6e6-4fc082e38b42",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 21,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-30T14:22:27.284985+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2008-1947 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2008-1947"
      },
      "action_statement": "Vulnerability CVE-2008-1947 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:21:53.066702+00:00",
      "status_notes": "Vulnerability CVE-2013-4590 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2013-4590"
      },
      "action_statement": "Vulnerability CVE-2013-4590 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:21:53.066702+00:00",
      "status_notes": "Vulnerability CVE-2015-5174 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2015-5174"
      },
      "action_statement": "Vulnerability CVE-2015-5174 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:22:27.284985+00:00",
      "status_notes": "Vulnerability CVE-2015-5346 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2015-5346"
      },
      "action_statement": "Vulnerability CVE-2015-5346 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:21:53.066702+00:00",
      "status_notes": "Vulnerability CVE-2016-0706 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-0706"
      },
      "action_statement": "Vulnerability CVE-2016-0706 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2016-0762 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-0762"
      },
      "action_statement": "Vulnerability CVE-2016-0762 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:22:27.284985+00:00",
      "status_notes": "Vulnerability CVE-2016-0763 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-0763"
      },
      "action_statement": "Vulnerability CVE-2016-0763 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2016-6794 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-6794"
      },
      "action_statement": "Vulnerability CVE-2016-6794 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2016-6796 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-6796"
      },
      "action_statement": "Vulnerability CVE-2016-6796 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2016-6797 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-6797"
      },
      "action_statement": "Vulnerability CVE-2016-6797 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:21:53.066702+00:00",
      "status_notes": "Vulnerability CVE-2016-6817 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-6817"
      },
      "action_statement": "Vulnerability CVE-2016-6817 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:22:27.284985+00:00",
      "status_notes": "Vulnerability CVE-2016-8747 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2016-8747"
      },
      "action_statement": "Vulnerability CVE-2016-8747 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2017-5647 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2017-5647"
      },
      "action_statement": "Vulnerability CVE-2017-5647 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:22:27.284985+00:00",
      "status_notes": "Vulnerability CVE-2017-5650 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2017-5650"
      },
      "action_statement": "Vulnerability CVE-2017-5650 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2017-5664 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2017-5664"
      },
      "action_statement": "Vulnerability CVE-2017-5664 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T02:36:49.908127+00:00",
      "status_notes": "Vulnerability CVE-2017-7674 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2017-7674"
      },
      "action_statement": "Vulnerability CVE-2017-7674 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:21:53.066702+00:00",
      "status_notes": "Vulnerability CVE-2017-7675 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2017-7675"
      },
      "action_statement": "Vulnerability CVE-2017-7675 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:37:14.382670+00:00",
      "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2019-0221"
      },
      "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2019-17569 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2019-17569"
      },
      "action_statement": "Vulnerability CVE-2019-17569 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-11996 does not affect version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: The target repository is NOT vulnerable to CVE-2020-11996. It contains both the initial fix (commit 9a0231683a) and a subsequent optimization (commit f258efef6c) that prevent the DoS vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-11996"
      },
      "impact_statement": "Version 9.0.46 is not vulnerable. Summary: The target repository is NOT vulnerable to CVE-2020-11996. It contains both the initial fix (commit 9a0231683a) and a subsequent optimization (commit f258efef6c) that prevent the DoS vulnerability. [terminalized not_affected from patch_application_manual/not_vulnerable]"
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2020-13934 does not affect version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2020-13934"
      },
      "impact_statement": "CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36"
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2020-13935 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2020-13935"
      },
      "action_statement": "Vulnerability CVE-2020-13935 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:33:09.807961+00:00",
      "status_notes": "Vulnerability CVE-2020-1935 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2020-1935"
      },
      "action_statement": "Vulnerability CVE-2020-1935 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-30T14:09:00.258382+00:00",
      "status_notes": "Vulnerability CVE-2020-8022 is a false positive for org.apache.tomcat:tomcat 9.0.46-tuxcare.8.",
      "vulnerability": {
        "name": "CVE-2020-8022"
      },
      "impact_statement": "The vulnerability has been withdrawn."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2021-30639 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-30639"
      },
      "action_statement": "Vulnerability CVE-2021-30639 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2021-30640 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-30640"
      },
      "action_statement": "Vulnerability CVE-2021-30640 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2021-33037 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-33037"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2021-41079 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-41079"
      },
      "action_statement": "Vulnerability CVE-2021-41079 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2021-42340 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-42340"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2021-43980 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2021-43980"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-23181 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2022-23181"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T23:59:58.436178+00:00",
      "status_notes": "Vulnerability CVE-2022-25762 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2022-25762"
      },
      "action_statement": "Vulnerability CVE-2022-25762 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-29885 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2022-29885"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2022-34305 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2022-34305"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-41080 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2023-41080"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-42795 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2023-42795"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2023-45648 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2023-45648"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2024-54677 does not affect version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat. The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2024-54677"
      },
      "impact_statement": "The version is not vulnerable. [terminalized not_affected from patch_application_manual/not_vulnerable]"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2025-49124"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2025-55752"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2025-55754"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2025-61795"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2025-66614 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2025-66614"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-25854"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-29T07:42:31.773838+00:00",
      "status_notes": "Vulnerability CVE-2026-29129 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-29129"
      },
      "action_statement": "Vulnerability CVE-2026-29129 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-10-28T21:58:36.804623+00:00",
      "status_notes": "Vulnerability CVE-2026-29145 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-29145"
      },
      "action_statement": "Vulnerability CVE-2026-29145 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-29146 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-29146"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-32990"
      },
      "action_statement": "Vulnerability CVE-2026-32990 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-34483 does not affect version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat. Version 9.0.46 is not vulnerable. Summary: CVE-2026-34483 does NOT affect Tomcat 9.0.46. The vulnerable component JsonAccessLogValve was introduced in version 9.0.74 (April 2023), almost 2 years after version 9.0.46 was released (May 2021). The target version predates the introduction of the vulnerable feature. [terminalized not_affected from patch_application_manual/not_vulnerable]",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-34483"
      },
      "impact_statement": "Version 9.0.46 is not vulnerable. Summary: CVE-2026-34483 does NOT affect Tomcat 9.0.46. The vulnerable component JsonAccessLogValve was introduced in version 9.0.74 (April 2023), almost 2 years after version 9.0.46 was released (May 2021). The target version predates the introduction of the vulnerable feature. [terminalized not_affected from patch_application_manual/not_vulnerable]"
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-34486 is fixed in version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-34486"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-34487"
      },
      "action_statement": "Vulnerability CVE-2026-34487 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-41284"
      },
      "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-41293"
      },
      "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-42498"
      },
      "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-43512"
      },
      "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-43513"
      },
      "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-43514"
      },
      "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-43515"
      },
      "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-65182"
      },
      "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-65905"
      },
      "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8",
          "identifiers": {
            "purl": "pkg:maven/org.apache.tomcat/tomcat@9.0.46-tuxcare.8"
          }
        }
      ],
      "timestamp": "2026-09-24T09:31:26.931840+00:00",
      "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat.",
      "vulnerability": {
        "name": "CVE-2026-68525"
      },
      "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.46-tuxcare.8 of org.apache.tomcat:tomcat."
    }
  ]
}