com.github.waffle:waffle-tomcat7 (>=2.1.1, <=2.2.1), org.apache.openwebbeans:openwebbeans-tomcat7 (>=2.0.14, <=2.0.26) +10 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.99)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat7 =2.1.1, =2.0.14, =1.3.7, =1.3.7, =1.3.7, =1.3.7, =1.3.7,...

org.apache.tomcat:tomcat-catalina-ant (7.0.78), org.apache.tomcat:tomcat-catalina-ha (7.0.78) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.78)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.78 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.78 - org.apache.tomcat:tomcat-catalina-ha 7.0.78 -...

com.github.psi-probe:psi-probe-tomcat8 (3.1.0), com.github.waffle:waffle-tomcat8 (1.9.1) +6 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.0.52)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat8 3.1.0 - com.github.waffle:waffle-tomcat8 1.9.1 -...

com.github.hazendaz.tomcat:tomcat10-config (>=10.1.2, <=10.1.54), io.orqueio.bpm.tomcat:orqueio-bpm-tomcat (>=1.0.0, <=1.0.11) +12 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat (>=10.1.2, <=10.1.54)

org.apache.tomcat:tomcat MAVEN version =10.1.2, =10.1.2, =1.0.0, =1.0.0, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.5 Source cves: CVE-2026-43513 Source advisory: OSV:GHSA-5MP6-JRQ3-R938...

com.github.dblock.waffle:waffle-tomcat8 (1.7.3), com.totalchange.servlicle:tomcat8 (1.0.0) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.15)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat8 1.7.3 - com.totalchange.servlicle:tomcat8 1.0.0 -...

com.github.psi-probe:psi-probe-tomcat7 (3.5.1), org.apache.tomcat:tomcat-catalina-ant (7.0.105) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.105)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.105 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.psi-probe:psi-probe-tomcat7 3.5.1 - org.apache.tomcat:tomcat-catalina-ant 7.0.10...

org.apache.tomcat:tomcat-catalina-ant (7.0.76), org.apache.tomcat:tomcat-catalina-ha (7.0.76) +5 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.76)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ant 7.0.76 - org.apache.tomcat:tomcat-catalina-ha 7.0.76 -...

org.apache.tomcat:tomcat-catalina-ha (8.5.35), org.apache.tomcat:tomcat-catalina-jmx-remote (8.5.35) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.tomcat:tomcat-catalina-ha 8.5.35 - org.apache.tomcat:tomcat-catalina-jmx-remote...

com.github.waffle:waffle-tomcat85 (1.9.1), org.apache.tomcat:tomcat-catalina-ha (8.5.32) +32 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.32)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.32 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.waffle:waffle-tomcat85 1.9.1 - org.apache.tomcat:tomcat-catalina-ha 8.5.32 -...

nl.nlighten:tomcat_exporter_client (0.0.7), nl.nlighten:tomcat_exporter_servlet (0.0.7) +6 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.5.33)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - nl.nlighten:tomcatexporterclient 0.0.7 - nl.nlighten:tomcatexporterservlet 0.0.7 -...

com.collaborne.operations:tomcat-remoteip-aws-valve (>=1.0.0, <=1.1.5), de.javakaffee.msm:memcached-session-manager-tc8 (>=1.9.5, <=2.0.0) +31 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.3)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.collaborne.operations:tomcat-remoteip-aws-valve =1.0.0, =1.9.5, =2.0.0 -...

org.apache.cxf.fediz.examples.wsclientwebapp:webapp (1.4.5), org.apache.cxf.fediz:fediz-tomcat7 (1.4.5) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (7.0.91)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.91 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - org.apache.cxf.fediz.examples.wsclientwebapp:webapp 1.4.5 - org.apache.cxf.fediz:fediz-tomca...

org.pidster:embed-apache-tomcat-core (0.1-alpha), org.pidster:embed-apache-tomcat-test (0.1-alpha) potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat (8.0.0-rc3)

org.apache.tomcat:tomcat MAVEN version 8.0.0-rc3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - org.pidster:embed-apache-tomcat-core 0.1-alpha - org.pidster:embed-apache-tomcat-test 0.1-alpha Source cves...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +27 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.21)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-41284 Source advisory: GHSA-GX5V-XP9W-J4CG...

ai.foremast.metrics:foremast-spring-4x-k8s-metrics (>=0.1.6, <=0.2.0), com.github.waffle:waffle-tomcat7 (1.8.2) +11 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.73)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.73 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - ai.foremast.metrics:foremast-spring-4x-k8s-metrics =0.1.6, =2.1.0, =2.1.0, =2.1.0, =1.2.0,...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.117), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.117)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-42498 Source advisory: OSV:GHSA-FV25-8XCX-GQJC...

codes.vps:tomcat-valve-request-filter (0.1), com.addc:addc-svr-tomcat (>=2.5, <=2.9) +260 more potentially affected by CVE-2026-41293 via org.apache.tomcat:tomcat-coyote (>=8.5.0, <=9.0.117)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.0, =2.5, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =2.3.0, =1.0.0, =3.2.1036, =1.6.1, =1.0.0, =1.0.4, =1.0.31 - com.github.albfernandez:jbpm-tomcat 3.2.19.ayg - com.github.dblock.waffle:waffle-tomcat9 1.8.1 and more Source cve...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +32 more potentially affected by CVE-2026-41293 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.21)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-41293 Source advisory: OSV:GHSA-R29C-68GH-XP6X...

com.github.dblock.waffle:waffle-tomcat7 (1.8.1), com.s24.tomcat:tomcat-cache-realm (0.1.0) +7 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (7.0.67)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.dblock.waffle:waffle-tomcat7 1.8.1 - com.s24.tomcat:tomcat-cache-realm 0.1.0 -...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +120 more potentially affected by CVE-2026-41293 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.54)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =3.0.3 - io.github.microsphere-projects:microsphere-spring-cloud-gateway 0.2.0 and more Source cves: CVE-2026-41293 Source advisory: OSV:GHSA-R29C-68GH-X...