{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:7f830c94-c956-545f-b8a6-a8807f796e0a",
  "version": 1,
  "metadata": {
    "supplier": {
      "name": "TuxCare",
      "url": [
        "https://tuxcare.com"
      ]
    }
  },
  "components": [
    {
      "name": "tomcat-juli",
      "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.39-tuxcare.2",
      "type": "library",
      "group": "org.apache.tomcat",
      "bom-ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.39-tuxcare.2",
      "version": "9.0.39-tuxcare.2",
      "pedigree": {
        "ancestors": [
          {
            "name": "tomcat-juli",
            "purl": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.39",
            "type": "library",
            "group": "org.apache.tomcat",
            "version": "9.0.39"
          }
        ]
      },
      "supplier": {
        "url": [
          "https://tuxcare.com"
        ],
        "name": "TuxCare"
      }
    }
  ],
  "vulnerabilities": [
    {
      "id": "CVE-2007-5342",
      "affects": [
        {
          "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.39-tuxcare.2"
        }
      ],
      "bom-ref": "urn:uuid:6a386ed4-d230-564d-ac71-d16b9d1eaa49",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2007-5342 does not affect version 9.0.39-tuxcare.2 of org.apache.tomcat:tomcat-juli. not_affected \u2014 CVE-2007-5342 is not present in Tomcat 9.0.39. The vulnerability (granting AllPermission to tomcat-juli.jar in catalina.policy, enabling unrestricted file system access and arbitrary file overwrites) was fixed by upstream Apache in commit 52a88ae7a4, which shipped in the 9.0.39 release before TuxCare onboarding. The target's catalina.policy contains restricted permissions that limit JULI file a...",
        "justification": "code_not_present"
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/org.apache.tomcat/tomcat-juli@9.0.39-tuxcare.2"
    }
  ]
}