ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12866 more potentially affected by CVE-2026-76183 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.121)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-76183 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-20552494...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12866 more potentially affected by CVE-2026-87022 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.121)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-87022 Source advisory: MEND:CVE-2026-87022...

ai.astraform:remote-domain-template-java-spring (>=0.2.0, <=0.4.2), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2935 more potentially affected by CVE-2026-87022 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.25)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =0.2.0, =0.0.1, =0.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-87022 Source advisory:...

Security Bulletin: Apache Tomcat (tomcat-embed-websocket) — Insufficient Session Expiration via WebSocket

Summary tomcat-embed-websocket-10.1.57.jar detected by Mend scanner in db2-service-java/pom.xml. The affected version 10.1.57 is vulnerable to CVE-2026-73180 where a WebSocket session is not closed when the associated HTTP session ends after a session ID change, violating the Jakarta WebSocket...

Insufficient Session Expiration

Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An attacker can maintain access to resources beyond the intended session duration by establishing a WebSocket...

ROOT-APP-MAVEN-CVE-2024-23672 CVE-2024-23672 in io.root.org.apache.tomcat.embed:tomcat-embed-websocket - Patched by Root

Root has patched CVE-2024-23672 in the io.root.org.apache.tomcat.embed:tomcat-embed-websocket package for Root:Maven. Multiple fixed versions available...

com.aceql:aceql-http (6.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.63) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.5.63)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http 6.4 - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.6...

ch.rasc:embeddedtc (1.13), ch.rasc:embeddedtc-maven-plugin (1.12) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.53)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.13 - ch.rasc:embeddedtc-maven-plugin 1.12 -...

ch.rasc:embeddedtc (1.19), org.akhikhl.gretty:gretty-runner-tomcat (1.2.3) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.61)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.61 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.19 - org.akhikhl.gretty:gretty-runner-tomcat 1.2.3 -...

ch.rasc:embeddedtc (1.23), ch.rasc:embeddedtc-maven-plugin (1.18) +6 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (7.0.65)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.65 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.23 - ch.rasc:embeddedtc-maven-plugin 1.18 -...

ch.rasc:embeddedtc (1.24), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.67) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.24 - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.67...

ch.rasc:embeddedtc (1.24), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.67) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.67)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.67 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.24 - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.67...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.70), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.70) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.70)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.70 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.70 -...

ch.rasc:embeddedtc (1.27), ch.rasc:embeddedtc-maven-plugin (1.20) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.27 - ch.rasc:embeddedtc-maven-plugin 1.20 -...

ch.rasc:embeddedtc (1.27), ch.rasc:embeddedtc-maven-plugin (1.20) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.27 - ch.rasc:embeddedtc-maven-plugin 1.20 -...

ch.rasc:embeddedtc (1.27), ch.rasc:embeddedtc-maven-plugin (1.20) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.72)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.72 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.27 - ch.rasc:embeddedtc-maven-plugin 1.20 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.75), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.75) potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.75 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.75), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.75) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.75)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.75 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.75 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.76), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.76) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.76)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.76 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.76), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.76) potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.76)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.76 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.76 -...