ROOT-APP-MAVEN-CVE-2026-53434 CVE-2026-53434 in org.apache.tomcat:tomcat-util - Patched by Root

Root has patched CVE-2026-53434 in the org.apache.tomcat:tomcat-util package for Root:Maven. Multiple fixed versions available...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +283 more potentially affected by CVE-2026-80353 via org.apache.tomcat:tomcat-util (>=9.0.48, <=9.0.122)

org.apache.tomcat:tomcat-util MAVEN version =9.0.48, =0.6.2, =0.6.0, =3.0.11, =5.9.6, =5.0.0-m54.0, =5.2.14.0 - com.festo.aas:p4m-helpers 1.0.4 and more Source cves: CVE-2026-80353 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-21707509...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +96 more potentially affected by CVE-2026-65183 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.24)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-65183 Source advisory:...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +162 more potentially affected by CVE-2026-65183 via org.apache.tomcat:tomcat-util (>=10.1.0-m1, <=10.1.57)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.57.0 and more Source cves: CVE-2026-65183 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19342001...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +287 more potentially affected by CVE-2026-65183 via org.apache.tomcat:tomcat-util (>=9.0.43, <=9.0.120)

org.apache.tomcat:tomcat-util MAVEN version =9.0.43, =0.6.2, =0.6.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =3.0.11, =5.9.6, =5.0.0-m54.0, =3.3.7, =3.4.260 and more Source cves: CVE-2026-65183 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19342001...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +162 more potentially affected by CVE-2026-55276 via org.apache.tomcat:tomcat-util (>=10.1.0-m1, <=10.1.55)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.55.0 and more Source cves: CVE-2026-55276 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-17734713...

be.dabla:grizzly-spring-boot-jasper (>=2.0, <=2.7), co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1) +361 more potentially affected by CVE-2026-55276 via org.apache.tomcat:tomcat-util (>=9.0.0.m1, <=9.0.118)

org.apache.tomcat:tomcat-util MAVEN version =9.0.0.m1, =2.0, =0.6.2, =0.6.0, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =5.9.6, =1.10, =1.10, =2.6.0, =2.8.0 - com.codedx:webapp-runner 9.0.65.0 - com.codedx:webapp-runner-main 9.0.65.0 - com.codedx:webapp-runner-memcached 9.0.65....

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +84 more potentially affected by CVE-2026-55276 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.22)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-55276 Source advisory:...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +161 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=10.1.0-m7, <=10.1.55)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m7, =2.0.7, =4.0.0, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.55.0 and more Source cves: CVE-2026-53434 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-17733744...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +177 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=9.0.83, <=9.0.118)

org.apache.tomcat:tomcat-util MAVEN version =9.0.83, =0.6.2, =0.6.0, =6.3.0, =5.0.0-m54.0, =3.0.1, =2.2.4.0, =6.76, =3.1.0, =4.1.0, =4.1.0, =0.1.1, =3.4.0, =2.16.2, =1.15.2, =9.0.83.0, =9.0.118.0 and more Source cves: CVE-2026-53434 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-17733744...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +84 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.22)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-53434 Source advisory:...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +84 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.22)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-53434 Source advisory: GHSA-4X29-79GH-6V8Q...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +177 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=9.0.83, <=9.0.118)

org.apache.tomcat:tomcat-util MAVEN version =9.0.83, =0.6.2, =0.6.0, =6.3.0, =5.0.0-m54.0, =3.0.1, =2.2.4.0, =6.76, =3.1.0, =4.1.0, =4.1.0, =0.1.1, =3.4.0, =2.16.2, =1.15.2, =9.0.83.0, =9.0.118.0 and more Source cves: CVE-2026-53434 Source advisory: GHSA-4X29-79GH-6V8Q...

co.cask.tephra:tephra-examples (>=0.6.2, <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0, <=0.7.1) +177 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=9.0.83, <=9.0.118)

org.apache.tomcat:tomcat-util MAVEN version =9.0.83, =0.6.2, =0.6.0, =6.3.0, =5.0.0-m54.0, =3.0.1, =2.2.4.0, =6.76, =3.1.0, =4.1.0, =4.1.0, =0.1.1, =3.4.0, =2.16.2, =1.15.2, =9.0.83.0, =9.0.118.0 and more Source cves: CVE-2026-53434 Source advisory: OSV:GHSA-4X29-79GH-6V8Q...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +161 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=10.1.0-m7, <=10.1.55)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m7, =2.0.7, =4.0.0, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.55.0 and more Source cves: CVE-2026-53434 Source advisory: GHSA-4X29-79GH-6V8Q...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +161 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=10.1.0-m7, <=10.1.55)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m7, =2.0.7, =4.0.0, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.55.0 and more Source cves: CVE-2026-53434 Source advisory: OSV:GHSA-4X29-79GH-6V8Q...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +84 more potentially affected by CVE-2026-53434 via org.apache.tomcat:tomcat-util (>=11.0.0-m1, <=11.0.22)

org.apache.tomcat:tomcat-util MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-53434 Source advisory: OSV:GHSA-4X29-79GH-6V8Q...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +156 more potentially affected by CVE-2026-55276 via org.apache.tomcat:tomcat-util-scan (>=10.1.0-m1, <=10.1.55)

org.apache.tomcat:tomcat-util-scan MAVEN version =10.1.0-m1, =2.0.7, =5.0.0-m1, =5.0.0-m4, =1.0.0, =3.0.0, =5.0.0, =5.0.0, =3.3.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.16.0, =10.1.55.0 and more Source cves: CVE-2026-55276 Source advisory: MEND:CVE-2026-55276...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.4.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +77 more potentially affected by CVE-2026-55276 via org.apache.tomcat:tomcat-util-scan (>=11.0.0-m1, <=11.0.22)

org.apache.tomcat:tomcat-util-scan MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.37 - io.yupiik.http:simple-native-http-server 1.0.2 and more Source cves: CVE-2026-55276 Source advisory: MEND:CVE-2026-55276...

codes.vps:tomcat-valve-request-filter (1.0), com.atomgraph:linkeddatahub (>=4.0.0, <=5.4.0) +53 more potentially affected by CVE-2023-42795 via org.apache.tomcat:tomcat-util (>=10.1.0-m1, <=10.1.13)

org.apache.tomcat:tomcat-util MAVEN version =10.1.0-m1, =4.0.0, =0.2.0, =1.0.0, =1.0.0, =0.0.1, =2.3.0, =4.1.0, =1.0.2, =1.0.2, =1.0.0, =1.0.0, =1.0.9 and more Source cves: CVE-2023-42795 Source advisory: OSV:GHSA-G8PJ-R55Q-5C2V...