{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:f490f6f1-3b9a-5de9-aff9-c48dd0f82971",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-i18n-zh-CN",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8",
      "version": "10.1.18-tuxcare.8",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-i18n-zh-CN",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "10.1.18"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2024-23672",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b1c0f940-7133-5ea6-ae13-ef8ad3c45510",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-23672 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-24549",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5884b1fe-de2e-5c96-9385-66f19f6a2df5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-24549 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-34750",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f5bbd716-e005-5e88-b756-37bf7e01e9d5",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-34750 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-38286",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:f0e24ce6-307e-5cce-8785-7d1bdd472ab0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-38286 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-50379",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:cc9ac2a7-4a17-5073-b494-c0254f031c4a",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-50379 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-52316",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:52ccc5e5-b475-538a-b8ef-4328f55834f7",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-52316 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-54677",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:28c447f8-0817-5343-a5b8-1f30f1c664fe",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-54677 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2024-56337",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:5d9a4b53-ba71-5e44-85cd-8b36ea07b5df",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2024-56337 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-24813",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:67be6569-a782-5c3f-9178-6995766c3fc2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-24813 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-31650",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:b1c77677-36f3-57db-b7f9-d0d465d24993",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31650 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-31651",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9881cfe9-b36d-5d1f-ac34-c37e2e269628",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-31651 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-46701",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:0c9ab732-db75-5642-8990-e94c885ba26f",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-46701 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-48988",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:1227be93-979d-5bb5-ad9e-ba7d0e6f25e0",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48988 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-48989",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:da556ff1-ec95-58f6-b716-5af7af422eae",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-48989 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-49124",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:02a7b9a6-9b7d-59a6-8197-8408fdd9d3ca",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49124 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-49125",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:98839214-a72a-58b2-9996-128061e68d04",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-49125 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-52520",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7286cb4f-fce6-59c4-a634-af301dee8c2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-52520 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-53506",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:6d6e6ca5-fc18-57f1-bb1f-9978162fba71",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-53506 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-55668",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:91012967-6b15-536c-ad95-df3369bcc50d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55668 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-55752",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:57d7d88d-4431-50f5-bd04-a931a488e1d2",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55752 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-55754",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:03109221-f2e9-5a07-a2f1-bc8a9867c492",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-55754 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-61795",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:58ffaf1d-da44-5ce6-bc9e-9be1a21108b6",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-61795 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2025-66614",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7cee5110-d8db-5958-adf8-9e4a3a96364d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2025-66614 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-24733",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:342c14f6-30fe-5940-9fc8-8c43d4f80dcd",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24733 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-24734",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:bbdaae5d-da90-5865-9504-0074cf4c5f78",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-24734 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-24880",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:093ae4fc-3650-5ca7-abc1-3574cd288393",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-24880 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-25854",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:4b3b5bfb-74fd-59d2-9d5a-0295f2a5ad89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-25854 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-29145",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:2456dda0-2480-5900-bb16-132027cd50ec",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29145 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-29146",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:806c8c0b-cf86-549c-acc1-5952d82af806",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-29146 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-32990",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3ab3e723-398f-5eb5-92ea-2fe9b2a15f68",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-32990 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-34483",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3e9ab8bd-4228-5624-913e-d72cb757fa97",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34483 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-34486",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:c9416fb3-cef2-5c65-a487-60d26513ad36",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34486 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-34487",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7f8667a8-d05f-5d60-b703-aea9908f3d89",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-34487 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-41284",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:7ac54390-cc2a-5c1f-8672-9bfc22b08c41",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41284 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-41293",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:89b1750b-c80e-5fb9-b22a-abf6baaafc98",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41293 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-42498",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:8bbe8d22-0fa3-522c-a08c-055fc14eba2d",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42498 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-43512",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:ef544544-2de0-5253-95c3-7e8a000f2cd3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43512 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-43513",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:aa937571-3c8a-5c89-8d32-793aa3d09dcb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43513 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-43514",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:add35d3c-31c2-5ca7-b2b8-07470447b1eb",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-43514 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-43515",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:9812b84a-a083-57f8-97fc-28eab381f85b",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-43515 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-53434",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:df038af6-cac0-51ad-aa12-b22fe910f653",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-53434 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-65182",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:722e3fa9-5233-5b2f-b6e0-f0b98ea1489e",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-65182 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-65905",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:a373784b-15ff-5afc-b787-40ea3b1f4e21",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-65905 affects version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    },
    {
      "id": "CVE-2026-68525",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
        }
      ],
      "bom-ref": "urn:uuid:3f1de3fd-caea-5673-baaf-0879204abd52",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-68525 is fixed in version 10.1.18-tuxcare.8 of org.apache.tomcat:tomcat-i18n-zh-CN."
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN@10.1.18-tuxcare.8"
    }
  ]
}