com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-34487 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-34487 Source advisory: GHSA-X4M4-345F-5H5G...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-34487 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-34487 Source advisory: OSV:GHSA-X4M4-345F-5H5G...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.7, <=3.3.10) +11 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=9.0.20, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.20, =9.0.31, =3.3.7, =3.3.7, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-29146 Source advisory: OSV:GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=8.5.32, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =8.5.32, =9.0.31, =3.3.6, =3.3.6, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29145 Source advisory: GHSA-95JQ-RWVF-VJX4...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29145 Source advisory: OSV:GHSA-95JQ-RWVF-VJX4...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.113, <=9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=9.0.113, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.113, =9.0.113, =9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.7, <=3.3.10) +11 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=9.0.20, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.20, =9.0.31, =3.3.7, =3.3.7, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29146 Source advisory: OSV:GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat9-config (9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (9.0.115)

org.apache.tomcat:tomcat MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat9-config 9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves:...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.113, <=9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=9.0.113, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.113, =9.0.113, =9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves: CVE-2026-32990 Source advisory: GHSA-8MC5-53M5-3QJ2...

com.github.hazendaz.tomcat:tomcat9-config (9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (9.0.115)

org.apache.tomcat:tomcat MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat9-config 9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves:...

CVE-2025-14857

CVE-2025-14857 affects Semtech LoRa LR11xxx transceivers on early firmware versions. The flaw is an improper access control: memory write via the physical SPI interface does not enforce write protection on the program call stack, enabling overwriting of stack memory and limited arbitrary code exe...

CVE-2025-14857

An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An attacker with physical access to the SPI...

CVE-2025-14857 Semtech LR11xx Memory Write Access Control Bypass

An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An attacker with physical access to the SPI...

CVE-2025-14858: Sensitive Information in Resource Not Removed Before Reuse

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts the provided encrypted firmware packag...

CVE-2025-14857: Write-what-where Condition

An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write protection on the program call stack. An attacker with physical access to the SPI...

PT-2026-30995

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality. When a host issues a firmware validity check command via the SPI interface, the device decrypts the provided encrypted firmware packag...