Security Bulletin: IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core (CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500)

Summary IBM Db2 Developer Extension is affected by vulnerability in tomcat-embed-core CVE-2026-41284,CVE-2026-42498,CVE-2026-43514,CVE-2026-24880, CVE-2026-34483,CVE-2026-34487,CVE-2026-34500 Vulnerability Details CVEID:CVE-2026-41284 DESCRIPTION: Allocation of Resources Without Limits or...

K000162052: Apache Tomcat vulnerability CVE-2026-43514

Security Advisory Description Observable Timing Discrepancy vulnerability when comparing AJP secret in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, from 7.0.0 through...

Security update for tomcat11 (important)

openSUSE security update: security update for tomcat11 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21121-1 Rating: important References: bsc1265145 bsc1265162 bsc1265163 bsc1265165 bsc1265166 bsc1265167 bsc1265168 Cross-References: CVE-2026-4128...

OPENSUSE-SU-2026:21117-1 Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165. -...

OPENSUSE-SU-2026:21122-1 Security update for tomcat10

This update for tomcat10 fixes the following issues Update to Tomcat 10.1.55: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. - CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. - CVE-2026-42498: WebSocket authentication header exposure bsc1265165....

SUSE SLES12 Security Update : tomcat (SUSE-SU-2026:2299-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2299-1 advisory. This update for tomcat fixes the following issues Update to Tomcat 9.0.118: - CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handli...

Security update for tomcat

This update for tomcat fixes the following issues Update to Tomcat 9.0.118: CVE-2026-41284: Unbounded read in WebDAV LOCK and PROPFIND handling bsc1265162. CVE-2026-41293: HTTP/2 request headers not validated bsc1265163. CVE-2026-42498: WebSocket authentication header exposure bsc1265165...

tomcat10-10.1.55-1.1 on GA media (moderate)

tomcat10-10.1.55-1.1 on GA media Announcement ID: openSUSE-SU-2026:10926-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

tomcat11-11.0.22-1.1 on GA media (moderate)

tomcat11-11.0.22-1.1 on GA media Announcement ID: openSUSE-SU-2026:10927-1 Rating: moderate Cross-References: CVE-2026-41284 CVE-2026-41293 CVE-2026-42498 CVE-2026-43512 CVE-2026-43513 CVE-2026-43514 CVE-2026-43515 CVSS scores: CVE-2026-41284 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:...

CVE-2026-43514 vulnerabilities

Vulnerabilities for packages: ontop-fips, ontop, kayenta-fips, nacos-docker, thingsboard, camunda, camunda-zeebe, kayenta...

com.github.yuyenews:mars-cloud-core (>=3.0.6, <=3.0.7), com.github.yuyenews:mars-cloud-feign (>=3.0.6, <=3.0.7) +12 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.49)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.49 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.yuyenews:mars-cloud-core =3.0.6, =3.0.6, =3.0.6, =3.0.6, =3.0.9,...

ch.rasc:embeddedtc (1.20), com.bsb.common.vaadin:com.bsb.common.vaadin7.embed (0.6) +9 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.62)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.62 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.20 - com.bsb.common.vaadin:com.bsb.common.vaadin7.embed...

com.github.psi-probe:psi-probe-tomcat85 (>=4.1.5, <=4.2.0), com.github.waffle:waffle-tomcat85 (3.4.0) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.100)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.100 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 =4.1.5, =4.2.0 - com.github.waffle:waffle-tomcat85...

org.apache.ranger:embeddedwebserver (2.1.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.105) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.105 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.ranger:embeddedwebserver 2.1.0 -...

au.com.mountain-pass:hyperstate (>=4, <=9), ch.rasc:embeddedtc (2.14) +394 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.33)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - au.com.mountain-pass:hyperstate =4, =0.0.21, =0.0.21, =0.0.21, =0.0.21,...

org.apache.tomcat.embed:tomcat-embed-jasper (8.5.21), org.apache.tomcat.embed:tomcat-embed-websocket (8.5.21) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.5.21)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.21 -...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.0-rc1) potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.0-rc1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.0-rc1 Source cves:...

com.amazonaws:aws-dynamodb-session-tomcat (>=2.0.1, <=2.0.3), com.github.dblock.waffle:waffle-tomcat7 (1.8.0) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.64)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.amazonaws:aws-dynamodb-session-tomcat =2.0.1, =issue1596-8.0.0.12, =1.0.9, =1.0.20 Sourc...

net.myrrix:myrrix-web (0.7), org.apache.geode:geode-modules-tomcat7 (>=1.0.0-incubating.m2, <=1.0.0-incubating.m3) +30 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.30)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - net.myrrix:myrrix-web 0.7 - org.apache.geode:geode-modules-tomcat7 =1.0.0-incubating.m2,...

org.apache.tomcat:tomcat-catalina-ha (8.5.21), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.21) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.21)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.21 - org.apache.tomcat:tomcat-catalina-jmx-remote...