com.github.waffle:waffle-tomcat7 (>=2.1.1, <=2.2.1), org.apache.openwebbeans:openwebbeans-tomcat7 (>=2.0.14, <=2.0.26) +10 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.99)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 =2.1.1, =2.0.14, =1.3.7, =1.3.7, =1.3.7, =1.3.7, =1.3.7,...

org.apache.tomcat:tomcat-catalina-ha (8.5.97), org.apache.tomcat:tomcat-catalina-ws (8.5.97) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.97)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.97 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.97 - org.apache.tomcat:tomcat-catalina-ws 8.5.97 -...

com.googlecode.jeeunit:jeeunit-assembly (>=0.9.0, <=0.9.1), com.googlecode.jeeunit:jeeunit-tomcat7 (>=0.9.0, <=0.9.1) +10 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.23)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.jeeunit:jeeunit-assembly =0.9.0, =0.9.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0,...

com.collaborne.operations:tomcat-cors-regex-filter (1.0.0), net.aequologica.neo:geppaequo-tags (0.5.2) +18 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.23)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.23 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.collaborne.operations:tomcat-cors-regex-filter 1.0.0 - net.aequologica.neo:geppaequo-tag...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +183 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (>=9.0.0.m1, <=9.0.117)

org.apache.tomcat:tomcat-catalina MAVEN version =9.0.0.m1, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.6.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.1.0, =3.0.0.rc2, =4.5.0 and more Source cves: CVE-2026-42498 Source advisory: OSV:GHSA-FV25-8XCX-GQJC...

com.googlecode.t7mp:maven-t7-common (>=0.9.10.m5, <=0.9.10.m6), com.googlecode.t7mp:maven-tomee-plugin (0.9.10.m3) +8 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.25)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common =0.9.10.m5, =0.9.10.m6 -...

com.github.dblock.waffle:waffle-tomcat7 (1.7.3), it.cosenonjaviste:tomcat-jwt-security (>=1.0.0, <=1.1.1) +11 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.57)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.57 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat7 1.7.3 - it.cosenonjaviste:tomcat-jwt-security =1.0.0...

org.apache.tomcat:tomcat-catalina-ha (8.5.6), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.6) +26 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.6)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.6 - org.apache.tomcat:tomcat-catalina-jmx-remote 8.5...

com.github.psi-probe:psi-probe-tomcat85 (3.5.7), org.apache.tomcat:tomcat-catalina-ha (8.5.75) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.75)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.7 - org.apache.tomcat:tomcat-catalina-ha 8.5.75 ...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1), org.apache.tomcat:tomcat-catalina-ha (8.0.5) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.5)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =0.7, =0.15 Source cves: CVE-2026-424...

com.googlecode.t7mp:maven-t7-common (>=0.9.10.m5, <=0.9.10.m6), com.googlecode.t7mp:maven-tomee-plugin (0.9.10.m3) +8 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (7.0.25)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.googlecode.t7mp:maven-t7-common =0.9.10.m5, =0.9.10.m6 -...

com.github.waffle:waffle-tomcat7 (1.8.3), org.apache.cxf.fediz.examples.wsclientwebapp:webapp (>=1.2.4, <=1.4.1) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.75)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 1.8.3 - org.apache.cxf.fediz.examples.wsclientwebapp:webapp...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), com.github.waffle:waffle-tomcat7 (1.8.2) +11 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.73)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.73 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =2.1.0, =2.1.0, =2.1.0, =1.2.0,...

org.apache.tomcat:tomcat-catalina-ha (8.0.38), org.apache.tomcat:tomcat-catalina-jmx-remote (8.0.38) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.38)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.38 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.0.38 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.54), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.54)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-41284 Source advisory: OSV:GHSA-GX5V-XP9W-J4CG...

com.bluejeans:tomcat-redis-session-manager (2.0.0), com.ericsson.research.trap.transports:websocket-tomcat (>=1.3, <=1.4.2) +30 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.27)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.bluejeans:tomcat-redis-session-manager 2.0.0 -...

com.github.dblock.waffle:waffle-tomcat8 (1.7.5), com.intersult:maven-loader (>=1.2, <=1.3) +11 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.28)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.28 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.5 - com.intersult:maven-loader =1.2, =16, =16,...

org.apache.tomcat:tomcat-catalina-ha (8.5.68), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.68) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.68)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.68 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.68 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.psi-probe:psi-probe-tomcat85 (3.5.6), com.github.waffle:waffle-tomcat85 (>=3.1.0, <=3.1.1) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.73)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.73 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat85 3.5.6 - com.github.waffle:waffle-tomcat85 =3.1.0,...

com.brotherlogic.recordcollection:recordcollection (0.1), org.apache.tomcat:tomcat-catalina-ha (8.0.24) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.24)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.brotherlogic.recordcollection:recordcollection 0.1 - org.apache.tomcat:tomcat-catalina-h...