com.github.hazendaz.tomcat:tomcat9-config (>=9.0.113, <=9.0.115), org.ops4j.pax.web:pax-web-spi (8.0.35) potentially affected by CVE-2026-32990 via org.apache.tomcat:tomcat (>=9.0.113, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =9.0.113, =9.0.113, =9.0.115 - org.ops4j.pax.web:pax-web-spi 8.0.35 Source cves: CVE-2026-32990 Source advisory: OSV:GHSA-8MC5-53M5-3QJ2...

com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.4.260), cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913) +33 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=9.0.13, <=9.0.115)

org.apache.tomcat:tomcat-tribes MAVEN version =9.0.13, =3.2.1036, =1.7.2.230613, =1.7.2.230622, =0.1.2, =9.0.13, =9.0.13, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m3, =8.0.16 and more Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.4.260), cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913) +33 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=9.0.13, <=9.0.115)

org.apache.tomcat:tomcat-tribes MAVEN version =9.0.13, =3.2.1036, =1.7.2.230613, =1.7.2.230622, =0.1.2, =9.0.13, =9.0.13, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m3, =8.0.16 and more Source cves: CVE-2026-29146 Source advisory: OSV:GHSA-H468-7PVH-8VR8...

io.antmedia.app:root (>=1.8.0, <=2.3.2), io.antmedia:ant-media-server (>=1.6.2, <=2.7.0) +16 more potentially affected by CVE-2026-29146 via org.apache.tomcat:tomcat-tribes (>=8.5.38, <=8.5.100)

org.apache.tomcat:tomcat-tribes MAVEN version =8.5.38, =1.8.0, =1.6.2, =1.6.2, =8.5.38, =8.5.38, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.0.6, =7.1.4 and more Source cves: CVE-2026-29146 Source advisory: GHSA-H468-7PVH-8VR8...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +27 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.52)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (>=11.0.0-m6, <=11.0.18), org.ops4j.pax.web:pax-web-spi (>=11.0.0, <=11.1.0) potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=11.0.0-m6, <=11.0.18)

org.apache.tomcat:tomcat MAVEN version =11.0.0-m6, =11.0.0-m6, =11.0.0, =11.1.0 Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=8.5.32, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =8.5.32, =9.0.31, =3.3.6, =3.3.6, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-25854 Source advisory: OSV:GHSA-9M3C-QCXR-9X87...

com.atomgraph:linkeddatahub (>=5.5.0, <=5.5.2), com.github.waffle:waffle-tomcat10 (3.6.0) +39 more potentially affected by CVE-2025-66614 +1 more via org.apache.tomcat:tomcat-coyote (>=10.1.50, <=10.1.52)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.50, =5.5.0, =3.4.0, =10.1.50, =10.1.50, =10.1.50, =10.1.50, =10.1.52 - org.apache.tomee.bom:tomee-webprofile 10.1.4 - org.apache.tomee.maven:tomee-embedded-maven-plugin 10.1.4 - org.apache.tomee:apache-tomee 10.1.4 -...

cn.4coder:struts (>=0.0.2, <=0.0.5), cn.hackyo:vsphere-samples-nodeps (6.7.0) +436 more potentially affected by CVE-2026-24880 via org.apache.tomcat:tomcat-coyote (>=7.0.0, <=9.0.115)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.0, =0.0.2, =2.5, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.1.1, =2.0.0, =3.0.0, =1.0.0, =2.3.0, =2.8.0 and more Source cves: CVE-2026-24880 Source advisory: GHSA-563X-Q5RQ-57QP...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +32 more potentially affected by CVE-2026-24880 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-24880 Source advisory: OSV:GHSA-563X-Q5RQ-57QP...

cn.4coder:struts (>=0.0.2, <=0.0.5), cn.hackyo:vsphere-samples-nodeps (6.7.0) +436 more potentially affected by CVE-2026-24880 via org.apache.tomcat:tomcat-coyote (>=7.0.0, <=9.0.115)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.0, =0.0.2, =2.5, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.1.1, =2.0.0, =3.0.0, =1.0.0, =2.3.0, =2.8.0 and more Source cves: CVE-2026-24880 Source advisory: OSV:GHSA-563X-Q5RQ-57QP...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +120 more potentially affected by CVE-2026-24880 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.50)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =2.0.7, =4.0.0, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =3.0.0 - io.github.microsphere-projects:microsphere-spring-cloud-gateway 0.2.0 and more Source cves: CVE-2026-24880 Source advisory: OSV:GHSA-563X-Q5RQ-5...

com.github.psi-probe:psi-probe-tomcat11 (>=5.0.0, <=5.3.0), com.github.waffle:waffle-tomcat11 (>=3.4.0, <=3.6.0) +27 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat-catalina (>=11.0.0-m1, <=11.0.18)

org.apache.tomcat:tomcat-catalina MAVEN version =11.0.0-m1, =5.0.0, =3.4.0, =2.5.8, =1.0-rc4, =1.2.0-rc3, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.25, =1.0.0, =1.0.1 and more Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

codes.vps:tomcat-valve-request-filter (0.1), com.addc:addc-svr-tomcat (>=2.6, <=2.9) +234 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat-catalina (>=8.5.30, <=9.0.115)

org.apache.tomcat:tomcat-catalina MAVEN version =8.5.30, =2.6, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.6.0, =3.2.1036, =1.6.1, =1.0.0, =1.0.28, =1.0.1, =1.3.1, =6.35, =6.83 and more Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

ch.qos.logback.access:logback-access-tomcat (>=2.0.7, <=2.0.15), codes.vps:tomcat-valve-request-filter (1.0) +117 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat-catalina (>=10.1.0-m1, <=10.1.52)

org.apache.tomcat:tomcat-catalina MAVEN version =10.1.0-m1, =2.0.7, =1.0.0, =5.0.0, =5.0.0, =3.3.0, =0.2.0, =20260429, =20260429, =2.8.0, =0.2.2, =0.2.4 and more Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.115), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.10) +11 more potentially affected by CVE-2026-25854 via org.apache.tomcat:tomcat (>=8.5.32, <=9.0.115)

org.apache.tomcat:tomcat MAVEN version =8.5.32, =9.0.31, =3.3.6, =3.3.6, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =7.0.5, =5.22.2, =8.0.0, =10.0.1 Source cves: CVE-2026-25854 Source advisory: GHSA-9M3C-QCXR-9X87...

com.github.hazendaz.tomcat:tomcat11-config (11.0.18) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (11.0.18)

org.apache.tomcat:tomcat MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat11-config 11.0.18 Source cves: CVE-2026-29129 Source advisory:...

com.github.hazendaz.tomcat:tomcat11-config (11.0.18) potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat (11.0.18)

org.apache.tomcat:tomcat MAVEN version 11.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat and may be impacted: - com.github.hazendaz.tomcat:tomcat11-config 11.0.18 Source cves: CVE-2026-29129 Source advisory:...

com.atomgraph:linkeddatahub (>=5.5.0, <=5.5.2), com.github.waffle:waffle-tomcat10 (3.6.0) +31 more potentially affected by CVE-2026-29129 via org.apache.tomcat:tomcat-coyote (10.1.52)

org.apache.tomcat:tomcat-coyote MAVEN version 10.1.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - com.atomgraph:linkeddatahub =5.5.0, =5.5.2 - com.github.waffle:waffle-tomcat10 3.6.0 -...