11571 matches found
Insufficient Session Expiration
Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An...
Insufficient Session Expiration
Overview org.apache.tomcat:tomcat-websocket is a Tomcat WebSocket JSR356 implementation. Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An attacker can maintain access...
ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +12910 more potentially affected by CVE-2026-73180 via org.apache.tomcat.embed:tomcat-embed-websocket (>=9.0.0.m18, <=9.0.120)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =9.0.0.m18, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2026-73180 Source advisory: SNYK:JAVA-ORGAPACHETOMCATEMBED-20302876...
ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +8674 more potentially affected by CVE-2026-73180 via org.apache.tomcat.embed:tomcat-embed-websocket (>=10.1.0-m16, <=10.1.57)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =10.1.0-m16, =0.2.0, =0.0.4, =0.1.3, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2026-73180 Source advisory:...
cv.igrp:igrp-core (>=1.7.2.230613, <=1.8.3.240913), cv.igrp:igrp-core-war (>=1.7.2.230622, <=1.7.3.230802) +26 more potentially affected by CVE-2026-73180 via org.apache.tomcat:tomcat-websocket (>=9.0.5, <=9.0.120)
org.apache.tomcat:tomcat-websocket MAVEN version =9.0.5, =1.7.2.230613, =1.7.2.230622, =8.0.1, =8.0.5, =8.0.5, =8.0.5, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.16 and more Source cves: CVE-2026-73180 Source advisory:...
org.apache.tomee.bom:tomee-microprofile (>=10.0.0-m1, <=10.0.0), org.apache.tomee.bom:tomee-plume (>=10.0.0-m1, <=10.0.0) +13 more potentially affected by CVE-2026-73180 via org.apache.tomcat:tomcat-websocket (>=10.1.20, <=10.1.57)
org.apache.tomcat:tomcat-websocket MAVEN version =10.1.20, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.2.0 Source cves: CVE-2026-73180 Source advisory:...
io.github.t1willi:jolt (>=2.6.2, <=25.08.4), org.apache.tomee.bom:tomee-webprofile (11.0.0-m1) +15 more potentially affected by CVE-2026-73180 via org.apache.tomcat:tomcat-websocket (>=11.0.0-m20, <=11.0.24)
org.apache.tomcat:tomcat-websocket MAVEN version =11.0.0-m20, =2.6.2, =11.0.0, =11.1.3 and more Source cves: CVE-2026-73180 Source advisory: SNYK:JAVA-ORGAPACHETOMCAT-19342256...
Insufficient Session Expiration
Overview org.apache.tomcat:tomcat is an implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when th...
Insufficient Session Expiration
Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An attacker can maintain access to...
Insufficient Session Expiration
Overview Affected versions of this package are vulnerable to Insufficient Session Expiration due to the improper termination of WebSocket sessions when the associated HTTP session ends. An attacker can maintain access to resources beyond the intended session duration by establishing a WebSocket...
ai.astraform:remote-domain-template-java-spring (>=0.2.0, <=0.4.4), ai.chatur:cortex-spring-boot-autoconfigure (>=0.0.1, <=0.1.4) +2975 more potentially affected by CVE-2026-73180 via org.apache.tomcat.embed:tomcat-embed-websocket (>=11.0.0-m15, <=11.0.24)
org.apache.tomcat.embed:tomcat-embed-websocket MAVEN version =11.0.0-m15, =0.2.0, =0.0.1, =0.0.1, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =4.5.0, =2.0.0-beta-2, =2.0.0-beta-1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.2.0 and more Source cves: CVE-2026-73180 Source advisory:...
EUVD-2026-66192
Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta...
CVE-2025-61164
Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...
CVE-2025-61164
A flaw in Cohere North AI v1.1.5 allows for an information leak through its WebSocket Endpoint . A remote attacker could exploit this vulnerability to gain unauthorized access to sensitive data. To mitigate this risk, users should disable the affected WebSocket endpoint in the service configurati...
CVE-2025-61164
Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...
Linux Distros Unpatched Vulnerability : CVE-2026-73180
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket...
CVE-2026-47848: Undefined Security Weakness
In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 -...
CVE-2025-61164: Exposure of Sensitive Information to an Unauthorized Actor
Cohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint...
