Always-Incorrect Control Flow Implementation

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Always-Incorrect Control Flow Implementation due to incorrect control flow in the RewriteValve process. An attacker can bypass intended rewrite rules by crafting...

Improper Authorization

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Improper Authorization due to the improper enforcement of security constraints in the default servlet when certain HTTP methods or method omissions are configure...

MITM (Man-in-the-Middle) org.apache.tomcat.embed:tomcat-embed-core Dependency in Bitbucket Data Center

This High severity MITM Man-in-the-Middle vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 9.6.0, 10.0.0, 10.1.1, 10.2.0, and 10.3.0 of Bitbucket Data Center. This MITM Man-in-the-Middle vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.pidster:embed-apache-tomcat-core (0.2), org.pidster:embed-apache-tomcat-test (0.2) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.0.0-rc5)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.2 - org.pidster:embed-apache-tomcat-test 0.2 Source cves:...

org.apache.tomcat:tomcat-catalina-ha (8.0.14), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.14) +8 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.14)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.14 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.brotherlogic.recordcollection:recordcollection (0.1), org.apache.tomcat:tomcat-catalina-ha (8.0.24) +6 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.brotherlogic.recordcollection:recordcollection 0.1 - org.apache.tomcat:tomcat-catalina-h...

com.geetools.geemvc:geemvc (0.9.1-beta3), com.geetools.geemvc:geeticket-webapp-jpa-jsp (0.9.1-beta3) +8 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.geetools.geemvc:geemvc 0.9.1-beta3 - com.geetools.geemvc:geeticket-webapp-jpa-jsp...

com.geetools.geemvc:geemvc (0.9.1-beta3), com.geetools.geemvc:geeticket-webapp-jpa-jsp (0.9.1-beta3) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.geetools.geemvc:geemvc 0.9.1-beta3 - com.geetools.geemvc:geeticket-webapp-jpa-jsp...

com.geetools.geemvc:geemvc (0.9.1-beta3), com.geetools.geemvc:geeticket-webapp-jpa-jsp (0.9.1-beta3) +8 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.geetools.geemvc:geemvc 0.9.1-beta3 - com.geetools.geemvc:geeticket-webapp-jpa-jsp...