com.github.hazendaz.tomcat:tomcat9-config (>=9.0.39, <=9.0.120), org.apache.tomee:apache-tomee (>=8.0.5, <=8.0.16) +9 more potentially affected by CVE-2026-68763 via org.apache.tomcat:tomcat (>=9.0.39, <=9.0.120)

org.apache.tomcat:tomcat MAVEN version =9.0.39, =9.0.39, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =8.0.5, =5.23.8, =8.0.0, =10.1.1 Source cves: CVE-2026-68763 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-20304756...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.83, <=9.0.118), org.openl.rules.demo:openl-demo-app (>=5.25.16, <=5.25.17) +1 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat (>=9.0.83, <=9.0.118)

org.apache.tomcat:tomcat MAVEN version =9.0.83, =9.0.83, =5.25.16, =8.0.25, =10.1.0 Source cves: CVE-2026-53434 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-17733745...

CVE-2026-56255 Capgo - Denial of Service via Unlimited Demo App Creation

Capgo before 12.128.2 contains a denial of service vulnerability in the POST /app/demo endpoint that allows authenticated users with org write permissions to create unlimited demo applications without rate limiting or quota enforcement. Attackers can repeatedly invoke this endpoint to generate...

de.idealo.kafka:kafka-encryption (0.1-20180118), de.idealo.kafka:kafka-encryption-demo-app (>=0.1-20180111, <=0.1-20180118) +1 more potentially affected by CVE-2026-41731 via org.springframework.kafka:spring-kafka (1.3.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - de.idealo.kafka:kafka-encryption 0.1-20180118 -...

de.idealo.kafka:kafka-encryption (0.1-20180118), de.idealo.kafka:kafka-encryption-demo-app (>=0.1-20180111, <=0.1-20180118) +1 more potentially affected by CVE-2026-41727 via org.springframework.kafka:spring-kafka (1.3.2.release)

org.springframework.kafka:spring-kafka MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.kafka:spring-kafka and may be impacted: - de.idealo.kafka:kafka-encryption 0.1-20180118 -...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43513 Source advisory:...

org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (8.5.23)

org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...

org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.5.23)

org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43514 Source advisory:...

org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.5.23)

org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43512 Source advisory:...

org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.5.23)

org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-41284 Source advisory:...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-42498 Source advisory:...

org.openl.rules.demo:openl-demo-app (>=5.21.1, <=5.22.1) potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat (8.5.28)

org.apache.tomcat:tomcat MAVEN version 8.5.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app =5.21.1, =5.22.1 Source cves: CVE-2026-43515 Source advisory:...

org.openl.rules.demo:openl-demo-app (5.21.0), org.openl.rules.demo:org.openl.rules.demo.demo (>=5.20.1, <=5.20.4) potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (8.5.23)

org.apache.tomcat:tomcat MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.openl.rules.demo:openl-demo-app 5.21.0 - org.openl.rules.demo:org.openl.rules.demo.demo =5.20.1, =5.20.4...

Malicious Package

Overview pt-sc-demo-app is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-2567 Malicious code in pt-sc-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bb315a7617ec23d04aeb4d4518c1539efbeef21894d42401af06f0ec36fdb6 The package pt-sc-demo-app was found to contain malicious code. Source: ghsa-malware 755b0ca70d35b05cdaa098b0bd7a331c5f40f35f8d5bb0dcf56333ce7acce6e0...

Malicious code in pt-sc-demo-app (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 08bb315a7617ec23d04aeb4d4518c1539efbeef21894d42401af06f0ec36fdb6 The package pt-sc-demo-app was found to contain malicious code. Source: ghsa-malware 755b0ca70d35b05cdaa098b0bd7a331c5f40f35f8d5bb0dcf56333ce7acce6e0...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.40, <=9.0.108), org.apache.tomee:apache-tomee (>=8.0.6, <=8.0.16) +9 more potentially affected by CVE-2025-55754 via org.apache.tomcat:tomcat (>=9.0.40, <=9.0.108)

org.apache.tomcat:tomcat MAVEN version =9.0.40, =9.0.40, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =8.0.6, =5.23.9, =8.0.0, =10.0.1 Source cves: CVE-2025-55754 Source advisory: GHSA-VFWW-5HM6-HX2J...