ai.astraform:remote-domain-template-java-spring (>=0.2.0, <=0.4.2), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2935 more potentially affected by CVE-2026-76183 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.25)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =0.2.0, =0.0.1, =0.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-76183 Source advisory:...

Authentication Bypass by Alternate Name

Overview Affected versions of this package are vulnerable to Authentication Bypass by Alternate Name via the WebSocket endpoint security constraint handling. An attacker can gain unauthorized access to protected resources by connecting to endpoints using alternate names. Remediation Upgrade...

ai.astraform:remote-domain-template-java-spring (>=0.2.0, <=0.4.2), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2935 more potentially affected by CVE-2026-87022 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.25)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =0.2.0, =0.0.1, =0.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-87022 Source advisory:...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8640 more potentially affected by CVE-2026-87022 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.59)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-87022 Source advisory: MEND:CVE-2026-87022...

ai.astraform:remote-domain-template-java-spring (>=0.2.0, <=0.4.2), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2935 more potentially affected by CVE-2026-79677 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.25)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =0.2.0, =0.0.1, =0.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-79677 Source advisory:...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8630 more potentially affected by CVE-2026-73180 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.57)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-73180 Source advisory:...

ch.rasc:embeddedtc (1.21), ch.rasc:embeddedtc-maven-plugin (1.16) +2 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.63)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.21 - ch.rasc:embeddedtc-maven-plugin 1.16 -...

ch.rasc:embeddedtc (1.22), ch.rasc:embeddedtc-maven-plugin (1.17) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.64)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.22 - ch.rasc:embeddedtc-maven-plugin 1.17 -...

ch.rasc:embeddedtc (1.22), ch.rasc:embeddedtc-maven-plugin (1.17) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.64)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.64 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.22 - ch.rasc:embeddedtc-maven-plugin 1.17 -...

ch.rasc:embeddedtc (1.23), ch.rasc:embeddedtc-maven-plugin (1.18) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.65)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.23 - ch.rasc:embeddedtc-maven-plugin 1.18 -...

ch.rasc:embeddedtc (1.24), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.67) +1 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.24 - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.67...

ch.rasc:embeddedtc (1.26), com.github.shiver-me-timbers:smt-http-mock-tomcat7 (>=1.0, <=1.1) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.69)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.69 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.26 - com.github.shiver-me-timbers:smt-http-mock-tomcat7...

ch.rasc:embeddedtc (1.27), ch.rasc:embeddedtc-maven-plugin (1.20) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.27 - ch.rasc:embeddedtc-maven-plugin 1.20 -...

ch.rasc:embeddedtc (1.28), ch.rasc:embeddedtc-maven-plugin (1.22) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.79)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.79 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.28 - ch.rasc:embeddedtc-maven-plugin 1.22 -...

ch.rasc:embeddedtc (1.29), ch.rasc:embeddedtc-maven-plugin (1.23) +6 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.82)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.82 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.29 - ch.rasc:embeddedtc-maven-plugin 1.23 -...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.107) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.107)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.107 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - io.sniffy:sniffy-integration-tests-tomcat =3.1.10, =3.15.3, =3.16.8 Source...

ch.rasc:embeddedtc (2.2), com.github.jsimone:webapp-runner (8.0.18.0-m1) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.18)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.2 - com.github.jsimone:webapp-runner 8.0.18.0-m1 -...

ch.rasc:embeddedtc (2.5), org.akhikhl.gretty:gretty-runner-tomcat8 (1.2.3) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.22)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.5 - org.akhikhl.gretty:gretty-runner-tomcat8 1.2.3 -...

ch.rasc:embeddedtc (2.7), com.github.jsimone:webapp-runner (>=8.0.24.0, <=8.0.24.1) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.24)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.24 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.7 - com.github.jsimone:webapp-runner =8.0.24.0, =1.0,...

ch.rasc:embeddedtc (2.9), org.apache.tomcat.embed:tomcat-embed-jasper (8.0.27) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.27 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.9 - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.27 ...