ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2025-49125 Source...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7111 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-49125 Source advisory:...

Authentication Bypass Using an Alternate Path or Channel

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to how PreResources or PostResources handle pre-resources or post-resources mounted at non-root...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7111 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-49125 Source advisory: OSV:GHSA-WC4R-XQ3C-5CF3...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13612 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-49125 Source advisory: GHSA-WC4R-XQ3C-5CF3...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.4-1288) +76 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.7)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.4-1288) +76 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.7)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7111 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-49125 Source advisory: GHSA-WC4R-XQ3C-5CF3...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13612 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-49125 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-10365310...

Allocation of Resources Without Limits or Throttling

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the uniform handling of request parameters and parts in multipart requests. An attacker can craft a...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.4-1288) +76 more potentially affected by CVE-2025-48988 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.7)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7111 more potentially affected by CVE-2025-48988 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48988 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13612 more potentially affected by CVE-2025-48988 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48988 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-10365122...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13605 more potentially affected by CVE-2025-48976 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-48976 Source advisory: MEND:CVE-2025-48976...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7110 more potentially affected by CVE-2025-48976 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-48976 Source advisory: MEND:CVE-2025-48976...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.4-1288) +66 more potentially affected by CVE-2025-48976 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0, <=11.0.7)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.9-java8, =2.0.0-beta2, =2.0.0 and more Source cves: CVE-2025-48976 Source advisory: MEND:CVE-2025-48976...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12367 more potentially affected by CVE-2025-49124 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.24, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.24, =4.4.0.2, =0.0.12, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =0.5.8, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-49124 Source advisory: MEND:CVE-2025-49124...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7110 more potentially affected by CVE-2025-49124 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0, <=10.1.41)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-49124 Source advisory: MEND:CVE-2025-49124...

com.cleverpine:cp-virava-spring-helper (>=3.1.9, <=3.1.10), com.github.cafdataprocessing.services.staging:staging-service (>=3.3.0-1231, <=3.3.4-1288) +76 more potentially affected by CVE-2025-49124 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.7)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =3.1.9, =3.3.0-1231, =3.3.0-1231, =5.0.59, =13.2, =1.0.0, =1.1.6 - com.okta.spring.examples:okta-spring-boot-cloud-config-example 3.0.8 - com.okta.spring.examples:okta-spring-boot-hosted-code-flow-example 3.0.8 -...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13612 more potentially affected by CVE-2025-49125 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.105)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2025-49125 Source advisory: MEND:CVE-2025-49125...