org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-29145 Source advisory: GHSA-95JQ-RWVF-VJX4...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-34500 Source advisory: MEND:CVE-2026-34500...

io.antmedia:ant-media-server (>=2.8.0, <=3.0.1), io.github.microsphere-projects:microsphere-spring-cloud-gateway (0.2.0) +18 more potentially affected by CVE-2026-34487 via org.apache.tomcat:tomcat-tribes (>=10.1.0-m1, <=10.1.53)

org.apache.tomcat:tomcat-tribes MAVEN version =10.1.0-m1, =2.8.0, =0.2.2, =10.1.0-m1, =10.1.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.1.4 and more Source cves: CVE-2026-34487 Source advisory: MEND:CVE-2026-344...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-29145 Source advisory: MEND:CVE-2026-29145...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-34500 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.52)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.4 Source cves: CVE-2026-34500 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15989819...

io.undertow:undertow-servlet (1.4.2.final), io.undertow:undertow-websockets-jsr (1.4.2.final) +2 more potentially affected by CVE-2026-3260 via io.undertow:undertow-core (1.4.2.final)

io.undertow:undertow-core MAVEN version 1.4.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.4.2.final - io.undertow:undertow-websockets-jsr 1.4.2.final -...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-24734 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.49)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.3 Source cves: CVE-2026-24734 Source advisory: MEND:CVE-2026-24734...

org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m3, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m3, <=10.0.0) +2 more potentially affected by CVE-2026-24734 via org.apache.tomcat:tomcat-coyote-ffm (>=10.1.30, <=10.1.49)

org.apache.tomcat:tomcat-coyote-ffm MAVEN version =10.1.30, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.0.0-m3, =10.1.3 Source cves: CVE-2026-24734 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-15307823...

org.wildfly:wildfly-microprofile-metrics-smallrye (>=22.0.0.beta1, <=23.0.0.final) potentially affected by CVE-2021-3503 via org.wildfly:wildfly-metrics (>=22.0.0.beta1, <=23.0.0.final)

org.wildfly:wildfly-metrics MAVEN version =22.0.0.beta1, =22.0.0.beta1, =23.0.0.final Source cves: CVE-2021-3503 Source advisory: MEND:CVE-2021-3503...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: OSV:GHSA-HR32-MGPM-QF2F...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: GHSA-HR32-MGPM-QF2F...

cloud.piranha.extension:piranha-extension-microprofile (>=21.1.0, <=21.5.0), cloud.piranha.microprofile.omnifaces:piranha-microprofile-omnifaces-jwt (>=21.1.0, <=21.5.0) +191 more potentially affected by CVE-2021-28168 via org.glassfish.jersey.core:jersey-common (>=3.0.0, <=3.0.1)

org.glassfish.jersey.core:jersey-common MAVEN version =3.0.0, =21.1.0, =21.1.0, =1.0.0, =0.9.1, =1.0.0, =3.0.7, =3.0.alpha2, =4.2.0-beta.1, =4.2.0-rc.1 and more Source cves: CVE-2021-28168 Source advisory: MEND:CVE-2021-28168...

io.hyperfoil.tools:horreum-client (>=0.1, <=0.2), io.thorntail.servers:microprofile (>=2.6.0.final, <=2.7.0.final) +5 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=3.6.0.cr1, <=3.13.2.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =3.6.0.cr1, =0.1, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =2.6.0.final, =3.6.0.cr1, =3.13.2.final Source cves: CVE-2020-25633 Source advisory: MEND:CVE-2020-25633...

com.github.fmcejudo:quarkus-eureka (>=0.0.1, <=0.0.9), com.github.fmcejudo:quarkus-eureka-deployment (>=0.0.1, <=0.0.9) +37 more potentially affected by CVE-2020-25633 via org.jboss.resteasy:resteasy-client-microprofile (>=4.0.0.final, <=4.5.6.final)

org.jboss.resteasy:resteasy-client-microprofile MAVEN version =4.0.0.final, =0.0.1, =0.0.1, =0.0.1, =1.0.2.final, =1.1.0.final, =1.1.0.final, =1.0.2.final, =1.2.0.final, =0.1.0, =0.0.1, =0.0.1, =1.0.0-rc1, =1.1.0 - io.github.project-openubl:xml-sender-api 1.0.0.beta2 -...