org.apache.tomcat.embed:tomcat-embed-jasper (7.0.20), org.jboss.arquillian.container:arquillian-tomcat-embedded-7 (>=1.0.0.cr4, <=1.0.0.cr6) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.20 -...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.1), org.apache.tomcat.embed:tomcat-embed-websocket (8.0.1) +1 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

org.apache.openejb:apache-tomee (1.0.0-beta-1), org.apache.openejb:arquillian-tomee-embedded (1.0.0-beta-2) +18 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.21)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.openejb:apache-tomee 1.0.0-beta-1 - org.apache.openejb:arquillian-tomee-embedded...

com.jappyframework:jappy-framework (>=5.6.6, <=5.9.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.38) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.38)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jappyframework:jappy-framework =5.6.6, =5.9.4 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

org.apache.openejb:apache-tomee (1.7.5), org.apache.openejb:arquillian-tomee-codi-tests (1.7.5) +6 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (7.0.81)

org.apache.tomcat:tomcat MAVEN version 7.0.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.openejb:apache-tomee 1.7.5 - org.apache.openejb:arquillian-tomee-codi-tests 1.7.5 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.20), org.jboss.arquillian.container:arquillian-tomcat-embedded-7 (>=1.0.0.cr4, <=1.0.0.cr6) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.20 -...

com.jappyframework:jappy-framework (>=5.6.6, <=5.9.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.38) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.38)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jappyframework:jappy-framework =5.6.6, =5.9.4 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

com.jappyframework:jappy-framework (>=5.6.6, <=5.9.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.38) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.38)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jappyframework:jappy-framework =5.6.6, =5.9.4 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.20), org.jboss.arquillian.container:arquillian-tomcat-embedded-7 (>=1.0.0.cr4, <=1.0.0.cr6) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.20 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.19), org.gatein.pc:pc-test-servers-tomcat7 (>=2.4.0.alpha03, <=2.5.1.final) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.19)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.19 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.19 -...

org.apache.openejb:apache-tomee (1.7.5), org.apache.openejb:arquillian-tomee-codi-tests (1.7.5) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (7.0.81)

org.apache.tomcat:tomcat MAVEN version 7.0.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.apache.openejb:apache-tomee 1.7.5 - org.apache.openejb:arquillian-tomee-codi-tests 1.7.5 -...

com.jappyframework:jappy-framework (>=5.6.6, <=5.9.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.38) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.38)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.jappyframework:jappy-framework =5.6.6, =5.9.4 -...

ch.rasc:embeddedtc (1.27), ch.rasc:embeddedtc-maven-plugin (1.20) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.27 - ch.rasc:embeddedtc-maven-plugin 1.20 -...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2025-12543 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...

Sandbox Protection Bypass

io.fabric8.pipeline:kubernetes-pipeline-arquillian-steps is vulnerable to Sandbox Protection Bypass. The vulnerability is due to an overly permissive custom script security whitelist, which allows an attacker to invoke arbitrary methods and bypass sandbox restrictions...

de.adorsys.oauth:oauth-wildfly-support (>=0.12, <=0.35), io.undertow:undertow-servlet (1.1.8.final) +4 more potentially affected by CVE-2025-9784 via io.undertow:undertow-core (1.1.8.final)

io.undertow:undertow-core MAVEN version 1.1.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - de.adorsys.oauth:oauth-wildfly-support =0.12, =7.12.0, =1.2.6.release, =1.2.7.release -...