com.github.shiver-me-timbers:smt-http-mock-tomcat8 (>=1.0, <=1.1), com.rathravane:drumlin (>=1.0.0, <=1.1.0) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.35)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.shiver-me-timbers:smt-http-mock-tomcat8 =1.0, =1.0.0, =1.1.0 -...