ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7980 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-61795 Source advisory: OSV:GHSA-HGRR-935X-PQ79...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-61795 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-61795 Source...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m3), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m3) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m3 -...

com.datadoghq:dd-java-agent (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m1) +1 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.datadoghq:dd-java-agent =0.1.0, =0.1.1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m9), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m9) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m9 -...

club.dawdler:dawdler-boot-web-tomcat (>=0.1.4-jdk1.8-releases, <=0.1.6-jdk1.8-releases), club.dawdler:dawdler-boot-web-tomcat-jsp (>=0.1.4-jdk1.8-releases, <=0.1.6-jdk1.8-releases) +155 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.60, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.60, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =4.3.10, =4.3.10, =4.3.10, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.16 and more Source cves: CVE-2025-55754 Source...

com.aol.microservices:micro-tomcat (>=0.85, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.85, <=0.91.11) +6 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m6)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.85, =0.85, =1.0.0, =1.0.0, =1.0.1 -...

Relative Path Traversal

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Relative Path Traversal via the URL normalization. An attacker can bypass security constraints and access restricted directories such as /WEB-INF/ and /META-INF/...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +146 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13599 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.108)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-55752 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-13733966...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3972 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.6, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.6, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =1.5.19.release, =1.5.19.release, =1.5.19.release, =0.2.0, =1.6.0 and more Source cves: CVE-2025-55752 Source...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7980 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-61795 Source advisory: GHSA-HGRR-935X-PQ79...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7846 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.44)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-55752 Source advisory: OSV:GHSA-WMWF-9CCG-FFF5...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +126 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13601 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-61795 Source advisory: GHSA-HGRR-935X-PQ79...

club.dawdler:dawdler-boot-web-tomcat (>=0.1.4-jdk1.8-releases, <=0.1.6-jdk1.8-releases), club.dawdler:dawdler-boot-web-tomcat-jsp (>=0.1.4-jdk1.8-releases, <=0.1.6-jdk1.8-releases) +155 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.60, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.60, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =4.3.10, =4.3.10, =4.3.10, =4.3.10, =4.3.10, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.14, =4.3.16 and more Source cves: CVE-2025-55754 Source...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7846 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.44)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-55752 Source advisory: GHSA-WMWF-9CCG-FFF5...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +126 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3972 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.6, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.6, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =0.0.1, =1.5.19.release, =1.5.19.release, =1.5.19.release, =0.2.0, =1.6.0 and more Source cves: CVE-2025-55752 Source...