ch.rasc:embeddedtc (1.19), org.akhikhl.gretty:gretty-runner-tomcat (1.2.3) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.61)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.61 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.19 - org.akhikhl.gretty:gretty-runner-tomcat 1.2.3 -...

net.unit8.waitt.server:waitt-tomcat7 (1.3.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.109) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.109 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - net.unit8.waitt.server:waitt-tomcat7 1.3.0 -...

com.51degrees:geo-location.web.examples.mvc (4.4.13), com.51degrees:geo-location.web.examples.servlet (4.4.13) +6 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.90)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.90 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.51degrees:geo-location.web.examples.mvc 4.4.13 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.104), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.104) +1 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (7.0.104)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.104 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.104 -...

com.github.jsimone:webapp-runner (8.5.9.0), com.github.obase:obase-test (>=0.5.0, <=0.7.0) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.5.9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.5.9.0 - com.github.obase:obase-test =0.5.0...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.108), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.108) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.108)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.108 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.108 -...

org.apache.tomcat.embed:tomcat-embed-jasper (7.0.93), org.apache.tomcat.embed:tomcat-embed-websocket (7.0.93) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (7.0.93)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.93 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 7.0.93 -...

com.github.jsimone:webapp-runner (7.0.85.0), net.unit8.waitt.server:waitt-tomcat7 (1.2.3) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (7.0.85)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.85 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.85.0 -...

org.apache.tomcat.embed:tomcat-embed-jasper (8.0.42), org.apache.tomcat.embed:tomcat-embed-websocket (8.0.42) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.42)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.42 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 8.0.42 -...

ch.rasc:embeddedtc (1.21), ch.rasc:embeddedtc-maven-plugin (1.16) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.63)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.63 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.21 - ch.rasc:embeddedtc-maven-plugin 1.16 -...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.53.0, <=0.53.2), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.53.0, <=0.53.2) +5 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.53.0, =0.53.0, =6.0.8, =6.0.12...

com.github.jsimone:webapp-runner (7.0.86.0), org.apache.tomcat.embed:tomcat-embed-jasper (7.0.86) +1 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.86)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.86 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 7.0.86.0 -...

ch.rasc:embeddedtc (1.19), org.akhikhl.gretty:gretty-runner-tomcat (1.2.3) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (7.0.61)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 7.0.61 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - ch.rasc:embeddedtc 1.19 - org.akhikhl.gretty:gretty-runner-tomcat 1.2.3 -...

ai.platon.pulsar:pulsar-e2e-tests (>=4.5.0, <=4.6.0), ai.platon.pulsar:pulsar-it-tests (>=4.5.0, <=4.7.4) +1796 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.21)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.2.0, =0.5.0, =0.7.0, =0.5.0, =0.5.0, =0.10.9 and more Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8472 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.54)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-42498 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12879 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.5, <=9.0.117)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.5, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +2232 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.24, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.24, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =0.0.2, =0.0.3, =1.5.19.release, =1.5.19.release, =1.5.19.release, =0.0.8-alpha, =0.7, =1.5 and more Source cves: CVE-2026-42498 Source...

com.swisscom.cloud.sb:broker (>=2.13.0, <=4.2.5), org.apache.ranger:embeddedwebserver (>=1.1.0, <=2.1.0) potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-websocket (>=7.0.85, <=7.0.105)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =7.0.85, =2.13.0, =1.1.0, =2.1.0 Source cves: CVE-2026-42498 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-16643269...

com.aol.microservices:micro-tomcat (>=0.83, <=0.84), com.aol.microservices:micro-tomcat-with-jersey (>=0.83, <=0.84) +3 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m4)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.83, =0.83, =0.9.4, =0.9.12 -...

com.aol.microservices:micro-tomcat (>=0.85, <=0.91.11), com.aol.microservices:micro-tomcat-with-jersey (>=0.85, <=0.91.11) +6 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m6)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.aol.microservices:micro-tomcat =0.85, =0.85, =1.0.0, =1.0.0, =1.0.1 -...