com.51degrees:geo-location.web.examples.mvc (>=4.4.18, <=4.4.19), com.51degrees:geo-location.web.examples.servlet (>=4.4.18, <=4.4.19) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc =4.4.18, =4.4.18, =4.4.18,...

com.github.jsimone:webapp-runner (8.0.52.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.64.0, <=0.67.1) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.52.0 -...

ch.rasc:embeddedtc (1.21), ch.rasc:embeddedtc-maven-plugin (1.16) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.63)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.21 - ch.rasc:embeddedtc-maven-plugin 1.16 -...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.83)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =1.3.14 Source cves...

GHSA-FV25-8XCX-GQJC Apache Tomcat - WebSocket authentication header exposure

Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 Apache Tomcat 9.0.2 to 9.0.117 Older, unsupported versions may also be affected Description: If a WebSocket request was redirected after authentication, Tomcat's WebSocket client would present the most recent...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.cedarsoftware:n-cube (>=4.0.6, <=4.0.16), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.12) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.cedarsoftware:n-cube =4.0.6, =1.0.9-m3, =1.0.9-m6 Source cves:...

org.apache.tomcat.embed:tomcat-embed-jasper (8.5.19), org.apache.tomcat.embed:tomcat-embed-websocket (8.5.19) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.19 -...

org.apache.jspwiki:jspwiki-portable (2.10.5), org.apache.ranger:embeddedwebserver (1.2.0) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.90)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.jspwiki:jspwiki-portable 2.10.5 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.amazonaws:aws-dynamodb-session-tomcat (>=2.0.1, <=2.0.3), com.github.dblock.waffle:waffle-tomcat7 (1.8.0) +8 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.64)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.amazonaws:aws-dynamodb-session-tomcat =2.0.1, =issue1596-8.0.0.12, =1.0.9, =1.0.20 Sourc...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.5), org.apache.tomcat.embed:tomcat-embed-websocket (8.0.5) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.5)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.5 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.70), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.70) potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.70 -...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.53.0, <=0.53.2), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.53.0, <=0.53.2) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.53.0, =0.53.0, =6.0.8, =6.0.12...

org.apache.tomcat.embed:tomcat-embed-jasper (8.5.21), org.apache.tomcat.embed:tomcat-embed-websocket (8.5.21) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.21)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.21 -...

com.ajaxjs:aj-common-parent (>=1.4, <=1.5), com.ajaxjs:ajaxjs-framework (>=1.0.8, <=1.1.5) +7 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.84)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.84 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.ajaxjs:aj-common-parent =1.4, =1.0.8, =1.1.5 -...

com.wavefront:proxy (>=11.0-rc3, <=11.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.76) +1 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.76)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.wavefront:proxy =11.0-rc3, =11.0 -...

org.apache.tomcat:tomcat-catalina-ant (7.0.78), org.apache.tomcat:tomcat-catalina-ha (7.0.78) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.78)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.78 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.78 - org.apache.tomcat:tomcat-catalina-ha 7.0.78 -...

net.oneandone.troilus:troilus-service-example (>=0.5, <=0.6), net.oneandone:troilus-service-example (>=0.2, <=0.4) +5 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.12)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - net.oneandone.troilus:troilus-service-example =0.5, =0.2, =0.4 -...

com.wavefront:proxy (>=11.0-rc3, <=11.0), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.76) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.76)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.wavefront:proxy =11.0-rc3, =11.0 -...