{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:b25672d0-ff1b-5b94-a1f4-ea16a3d80b8b",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-juli",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.9",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.9",
      "version": "10.1.18-tuxcare.9",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-juli",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "10.1.18"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2007-5342",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.9"
        }
      ],
      "bom-ref": "urn:uuid:5c0f2e2f-1357-5cdd-95e2-0ade925b2e79",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-5342 does not affect version 10.1.18-tuxcare.9 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 affects Tomcat versions 5.5.9-5.5.25 and 6.0.0-6.0.15 where the catalina.policy granted AllPermission to tomcat-juli.jar, allowing web applications to modify logging configuration and overwrite arbitrary files. The target repository (Tomcat 10.1.18) already contains the upstream fix from December 2007 (commit 52a88ae7a4) that restricts JULI permissions to specific, minimal grants....",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@10.1.18-tuxcare.9"
    }
  ]
}