com.github.hazendaz.tomcat:tomcat10-config (>=10.1.50, <=10.1.52), org.apache.tomee:apache-tomee (10.1.4) +8 more potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=10.1.50, <=10.1.52)

org.apache.tomcat:tomcat MAVEN version =10.1.50, =10.1.50, =1.2.0, =1.3.0 - org.eximeebpms.bpm.tomcat:eximeebpms-tomcat-assembly 1.2.0 Source cves: CVE-2026-32990 Source advisory: GHSA-8MC5-53M5-3QJ2...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.113, <=9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=9.0.113, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.113, =9.0.113, =9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves: CVE-2026-32990 Source advisory: GHSA-8MC5-53M5-3QJ2...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.15, <=11.0.18) potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=11.0.15, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.15, =11.0.15, =11.0.18 Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=8.5.32, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =8.5.32, =9.0.31, =3.3.6, =3.3.6, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29146 Source advisory: OSV:GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.7, <=3.3.10) +11 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=9.0.20, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.20, =9.0.31, =3.3.7, =3.3.7, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.7, <=3.3.10) +11 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat (>=9.0.20, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.20, =9.0.31, =3.3.7, =3.3.7, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =8.0.0-m3, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-29146 Source advisory: OSV:GHSA-H468-7PVH-8VR8...

com.github.hazendaz.tomcat:tomcat9-config (9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (9.0.115)

org.apache.tomcat:tomcat MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat9-config 9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves:...

com.github.hazendaz.tomcat:tomcat9-config (9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (9.0.115)

org.apache.tomcat:tomcat MAVEN version 9.0.115 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat9-config 9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves:...

com.github.hazendaz.tomcat:tomcat10-config (10.1.52), org.apache.tomee:apache-tomee (10.1.4) +6 more potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (10.1.52)

org.apache.tomcat:tomcat MAVEN version 10.1.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat10-config 10.1.52 - org.apache.tomee:apache-tomee 10.1.4 -...

com.github.hazendaz.tomcat:tomcat11-config (11.0.18) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (11.0.18)

org.apache.tomcat:tomcat MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat11-config 11.0.18 Source cves: CVE-2026-29129 Source advisory:...

com.github.hazendaz.tomcat:tomcat11-config (11.0.18) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (11.0.18)

org.apache.tomcat:tomcat MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat11-config 11.0.18 Source cves: CVE-2026-29129 Source advisory:...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29145 Source advisory: OSV:GHSA-95JQ-RWVF-VJX4...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-29145 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-29145 Source advisory: GHSA-95JQ-RWVF-VJX4...

CVE-2026-35644 OpenClaw < 2026.3.22 - Credential Exposure via baseUrl Fields in Gateway Snapshots

OpenClaw before 2026.3.22 contains an information disclosure vulnerability that allows attackers with operator.read scope to expose credentials embedded in channel baseUrl and httpUrl fields. Attackers can access gateway snapshots via config.get and channels.status endpoints to retrieve sensitive...

CVE-2026-35644

OpenClaw before 2026.3.22 has an information disclosure vulnerability that allows attackers with operator.read scope to exfiltrate credentials embedded in channel baseUrl and httpUrl fields..adversaries can retrieve sensitive authentication information from gateway snapshots via config.get and ch...

CVE-2026-5976

A security flaw has been discovered in Totolink A7100RU 7.4cu.2313b20191024. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sambaEnabled results in os command injection. It is possible to initiate th...