org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m10), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m10) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m10 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13595 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m11, <=9.0.108)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m11, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-55752 Source advisory: OSV:GHSA-WMWF-9CCG-FFF5...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +126 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +126 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7846 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.44)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-55754 Source advisory: GHSA-VFWW-5HM6-HX2J...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +9277 more potentially affected by CVE-2025-55754 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.40, <=9.0.108)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.40, =4.4.0.2, =1.4.2, =1.6.6, =j8.2.3.2, =j8.2.3.2, =j8.2.3.2, =1.1.0-rc1, =1.0.0, =5.3.1, =1.13.0, =1.13.0, =2.4.1 and more Source cves: CVE-2025-55754 Source advisory: GHSA-VFWW-5HM6-HX2J...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7846 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.44)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-55752 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13595 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m11, <=9.0.108)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m11, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-55752 Source advisory: GHSA-WMWF-9CCG-FFF5...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +146 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

com.aol.microservices:micro-tomcat (>=0.83, <=0.84), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.84) +3 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.83, =0.83, =0.9.4, =0.9.12 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m8), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m8) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m8 -...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +146 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13601 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-61795 Source advisory: MEND:CVE-2025-61795...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7980 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-61795 Source advisory: MEND:CVE-2025-61795...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-61795 Source...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +146 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.11)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13601 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-61795 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-13723930...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7997 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.1.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-61795 Source advisory:...

Improper Resource Shutdown or Release

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Resource Shutdown or Release due to the delayed cleaning of multipart upload temporary files. An attacker can cause a denial-of-service by sending craft...

cn.hutool.v7:hutool-http (7.0.0-m1), cn.labzen:logger (1.6.0) +126 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.idx.sdk:okta-idx-java-embedded-auth-with-sdk 4.0.1 - com.okta.idx.sdk:okta-idx-java-embedded-sign-in-widget 4.0.1 -...