ch.rasc:embeddedtc (2.1), com.github.mjeanroy:junit-servers-tomcat (>=0.3.0, <=0.4.2) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.17 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 2.1 - com.github.mjeanroy:junit-servers-tomcat =0.3.0,...

ch.rasc:embeddedtc (1.26), com.github.shiver-me-timbers:smt-http-mock-tomcat7 (>=1.0, <=1.1) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.69)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.69 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.26 - com.github.shiver-me-timbers:smt-http-mock-tomcat7...

com.aceql:aceql-http (6.4), org.apache.tomcat.embed:tomcat-embed-jasper (8.5.63) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.5.63)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aceql:aceql-http 6.4 - org.apache.tomcat.embed:tomcat-embed-jasper 8.5.6...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.81), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.81) potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (7.0.81)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.81 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.81 -...

com.swisscom.cloud.sb:broker (>=2.13.0, <=4.2.5), org.apache.ranger:embeddedwebserver (>=1.1.0, <=2.1.0) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=7.0.85, <=7.0.105)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =7.0.85, =2.13.0, =1.1.0, =2.1.0 Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12865 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.5, <=9.0.117)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.5, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.7.4) +1791 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.21)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8459 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.54)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-42498 Source advisory:...

com.datadoghq:dd-java-agent (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m1) +1 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.datadoghq:dd-java-agent =0.1.0, =0.1.1 -...

com.aol.microservices:micro-tomcat (>=0.85, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.85, <=0.91.11) +6 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m6)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.85, =0.85, =1.0.0, =1.0.0, =1.0.1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m9), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m9) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m9 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m8), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m8) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m8 -...

com.aol.microservices:micro-tomcat (>=0.83, <=0.84), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.84) +3 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.83, =0.83, =0.9.4, =0.9.12 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m10), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m10) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m10 -...

com.xiaohaoo:xiaohao-public (1.0.4), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m24, <=11.0.0-m26) +2 more potentially affected by CVE-2024-52317 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m24, <=11.0.0-m26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m24, =11.0.0-m24, =11.0.0-m24, =2.0.6, =2.0.7 Source cves: CVE-2024-52317 Source advisory: GHSA-QVF5-HVJX-WM27...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), net.unit8.waitt.server:waitt-tomcat7 (>=1.3.0-beta1, <=1.3.0) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.92, <=7.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.92, =3.1.10, =1.3.0-beta1, =2.0.0, =7.0.92, =7.0.92, =4.3.0, =3.10.7, =4.7.0 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-websocket-9.0.83.jar

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-websocket-9.0.83.jar Vulnerability Details CVEID:CVE-2024-23672 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an incomplete cleanup flaw. By sending specially crafted...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12818 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.85)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-23672 Source advisory: GHSA-V682-8VV8-VPWR...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +2714 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.18)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =3.4.0 and more Source cves: CVE-2024-23672 Source advisory: GHSA-V682-8VV8-VPWR...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...