org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m3, <=11.0.0-m4), org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m3, <=11.0.0-m4) potentially affected by CVE-2023-24998 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m3, <=11.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m3, =11.0.0-m3, =11.0.0-m3, =11.0.0-m4 Source cves: CVE-2023-24998 Source advisory: MEND:CVE-2023-24998...

com.github.mjeanroy:junit-servers-tomcat (>=2.1.1, <=3.0.0), com.github.mjeanroy:junit-servers-tomcat-8 (3.0.0) +4 more potentially affected by CVE-2022-45143 via org.apache.tomcat.embed:tomcat-embed-core (8.5.83)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.83 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.mjeanroy:junit-servers-tomcat =2.1.1, =1.3.7, =1.3.14 Source cves...

com.astrapay:spring-qris (>=1.15, <=1.22), com.capitalone.dashboard:core (4.0.1) +7 more potentially affected by CVE-2022-42252 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =1.15, =3.0.0, =10.1.0-m1, =10.1.0-m1, =3.18.0, =3.20.1 Source cves: CVE-2022-42252 Source advisory: OSV:GHSA-P22X-G9PX-3945...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +13 more potentially affected by CVE-2017-12617 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m27)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =1.2, =1.2, =2.0 Source cves: CVE-2017-12617 Source advisory: OSV:GHSA-XJGH-84HX-56C5...

com.aol.microservices:micro-tomcat (>=0.83, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.91.11) +9 more potentially affected by CVE-2017-5648 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.0.m1, <=9.0.0.m17)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.0.m1, =0.83, =0.83, =0.1.0, =1.0.0, =1.0.0, =1.6-beta.2, =0.9.4, =9.0.0.m1, =9.0.0.m1, =9.0.0.m17 Source cves: CVE-2017-5648 Source advisory: OSV:GHSA-3VX3-XF6Q-R5XP...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22), org.apache.tomcat.embed:tomcat-embed-jasper (>=10.0.0-m1, <=10.0.0-m4) +1 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m4 Source cves: CVE-2020-11996 Source advisory: OSV:GHSA-53HP-JPWQ-2JGQ...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4354 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.36)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-13935...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.4.0.1), ai.dstack:server-base-local (>=0.0.12, <=0.1.15) +4354 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.36)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =j8.2.2.0, =j8.2.2.0, =greenwich.sr1, =greenwich.sr2, =greenwich.sr1, =greenwich.sr1, =greenwich.sr2, =greenwich.sr2.1 and more Source cves: CVE-2020-13935...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22) potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 10.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - nz.net.osnz.composite:composite-spring-boot-tomcat 5.22 Source...

com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2020-9484 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2020-9484, CVE-2021-25329 Source advisory: GHSA-JGWR-3QM3-26F3...

com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +6 more potentially affected by CVE-2020-9484 +1 more via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =3.15.0, =3.16.8 - su.boleyn.oj:oj-server 1.1.2 Source cves: CVE-2020-9484, CVE-2021-25329 Source advisory: MEND:CVE-2021-25329...

com.github.fanzezhen.common:common-security (>=0.0.1, <=2.0.3), com.github.fanzezhen:security (>=1.3.3, <=1.3.4.4) +4 more potentially affected by CVE-2021-24122 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =0.0.1, =1.3.3, =5.22, =10.0.0-m1, =10.0.0-m1, =10.0.0-m9 - org.jboss.arquillian.container:arquillian-tomcat-embedded-10 1.2.0.alpha1 Source cves: CVE-2021-24122 Source advisory: MEND:CVE-2021-24122...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3409 more potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.4, <=8.5.56)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.4, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2020-13935 Source...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22) potentially affected by CVE-2020-13935 via org.apache.tomcat.embed:tomcat-embed-websocket (10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 10.0.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - nz.net.osnz.composite:composite-spring-boot-tomcat 5.22 Source...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22), org.apache.tomcat.embed:tomcat-embed-jasper (>=10.0.0-m1, <=10.0.0-m4) +1 more potentially affected by CVE-2020-11996 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m4 Source cves: CVE-2020-11996 Source advisory: MEND:CVE-2020-11996...

nz.net.osnz.composite:composite-spring-boot-tomcat (5.22), org.apache.tomcat.embed:tomcat-embed-jasper (>=10.0.0-m1, <=10.0.0-m4) +1 more potentially affected by CVE-2020-9484 via org.apache.tomcat.embed:tomcat-embed-core (>=10.0.0-m1, <=10.0.0-m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m4 Source cves: CVE-2020-9484 Source advisory: MEND:CVE-2020-9484...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.99), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.99) +1 more potentially affected by CVE-2019-17569 via org.apache.tomcat.embed:tomcat-embed-core (7.0.99)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.99 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.99 -...

nz.net.osnz.composite:composite-spring-boot-tomcat (1.2), org.apache.tomcat.embed:tomcat-embed-jasper (>=9.0.1, <=9.0.4) +2 more potentially affected by CVE-2018-1304 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.1, <=9.0.4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.1, =9.0.1, =9.0.1, =2.11.0, =3.8.2 Source cves: CVE-2018-1304 Source advisory: GHSA-6RXJ-58JH-436R...