org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m9), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m9) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m9)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m9 -...

com.datadoghq:dd-java-agent (>=0.1.0, <=0.1.1), org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m1) +1 more potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m1)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.datadoghq:dd-java-agent =0.1.0, =0.1.1 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m3), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m3) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m3)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m3 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m8), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m8) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m8)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m8 -...

org.apache.tomcat.embed:tomcat-embed-jasper (9.0.0.m10), org.apache.tomcat.embed:tomcat-embed-websocket (9.0.0.m10) potentially affected by CVE-2025-55752 via org.apache.tomcat.embed:tomcat-embed-core (9.0.0.m10)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 9.0.0.m10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - org.apache.tomcat.embed:tomcat-embed-jasper 9.0.0.m10 -...

com.xiaohaoo:xiaohao-public (1.0.4), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m24, <=11.0.0-m26) +2 more potentially affected by CVE-2024-52317 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m24, <=11.0.0-m26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m24, =11.0.0-m24, =11.0.0-m24, =2.0.6, =2.0.7 Source cves: CVE-2024-52317 Source advisory: GHSA-QVF5-HVJX-WM27...

com.xiaohaoo:xiaohao-public (1.0.4), org.apache.tomcat.embed:tomcat-embed-jasper (>=11.0.0-m24, <=11.0.0-m26) +2 more potentially affected by CVE-2024-52317 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m24, <=11.0.0-m26)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m24, =11.0.0-m24, =11.0.0-m24, =2.0.6, =2.0.7 Source cves: CVE-2024-52317 Source advisory: OSV:GHSA-QVF5-HVJX-WM27...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), net.unit8.waitt.server:waitt-tomcat7 (>=1.3.0-beta1, <=1.3.0) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.92, <=7.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.92, =3.1.10, =1.3.0-beta1, =2.0.0, =7.0.92, =7.0.92, =4.3.0, =3.10.7, =4.8.0 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +11 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =2.0.0, =2.0.2 Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) +11 more potentially affected by CVE-2024-34750 via org.apache.tomcat.embed:tomcat-embed-core (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =11.0.0-m1, =1.0.0, =1.1.3, =1.1.3, =1.1.3, =1.1.2-snapshots, =1.1.2-snapshots, =1.1.2-snapshots, =11.0.0-m1, =11.0.0-m1, =2.0.0, =2.0.2 Source cves: CVE-2024-34750 Source advisory: GHSA-WM9W-RJJ3-J356...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-websocket-9.0.83.jar

Summary IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-websocket-9.0.83.jar Vulnerability Details CVEID:CVE-2024-23672 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an incomplete cleanup flaw. By sending specially crafted...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3423 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.4, <=8.5.95)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.4, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2024-23672 Source...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12832 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.85)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-23672 Source advisory: OSV:GHSA-V682-8VV8-VPWR...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12832 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.85)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-23672 Source advisory: GHSA-V682-8VV8-VPWR...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3423 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.4, <=8.5.95)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.4, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2024-23672 Source...

ai.stapi:axon-system-plugin (>=0.0.22, <=0.2.3), ai.stapi:form-api (>=0.0.28, <=0.2.3) +2714 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.18)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.0.22, =0.0.28, =0.0.11, =2.1.0.release, =3.0.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =2.10.0, =3.4.0 and more Source cves: CVE-2024-23672 Source advisory: GHSA-V682-8VV8-VPWR...

com.kfyty:kfyty-boot-starter-tomcat (1.0.0), com.kfyty:loveqq-boot-starter-tomcat (>=1.0.0, <=1.0.9) potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (11.0.0-m15)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version 11.0.0-m15 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-websocket and may be impacted: - com.kfyty:kfyty-boot-starter-tomcat 1.0.0 -...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +3423 more potentially affected by CVE-2024-23672 via org.apache.tomcat.embed:tomcat-embed-websocket (>=8.5.4, <=8.5.95)

org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =8.5.4, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2024-23672 Source...