| com.fasterxml.jackson.core:jackson-core |
CVE-2025-52999 |
HIGH |
2.12.4 |
2.15.0 |
https://access.redhat.com/errata/RHSA-2025:12280
https://access.redhat.com/security/cve/CVE-2025-52999
https://advisory.echohq.com/cve/CVE-2025-52999
https://bugzilla.redhat.com/2374804
https://bugzilla.redhat.com/show_bug.cgi?id=2374804
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52999
https://errata.almalinux.org/9/ALSA-2025-12280.html
https://errata.rockylinux.org/RLSA-2025:12280
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/pull/943
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-h46c-h94j-95f3
https://github.com/advisories/GHSA-h46c-h94j-95f3
https://linux.oracle.com/cve/CVE-2025-52999.html
https://linux.oracle.com/errata/ELSA-2025-14126.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52999
https://www.cve.org/CVERecord?id=CVE-2025-52999
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-68494 |
HIGH |
2.12.4 |
2.18.8, 2.21.4 |
https://access.redhat.com/security/cve/CVE-2026-68494
https://advisory.echohq.com/cve/CVE-2026-68494
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd
https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641
https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8
https://github.com/FasterXML/jackson-core/pull/1611
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9
https://github.com/advisories/GHSA-72hv-8253-57qq
https://nvd.nist.gov/vuln/detail/CVE-2026-68494
https://www.cve.org/CVERecord?id=CVE-2026-18401
https://www.cve.org/CVERecord?id=CVE-2026-68494
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2026-89425 |
HIGH |
2.12.4 |
2.21.7, 2.22.3, 2.18.11 |
https://access.redhat.com/errata/RHSA-2026:86706
https://access.redhat.com/security/cve/CVE-2026-89425
https://advisory.echohq.com/cve/CVE-2026-89425
https://bugzilla.redhat.com/2538720
https://bugzilla.redhat.com/2539084
https://bugzilla.redhat.com/show_bug.cgi?id=2538720
https://bugzilla.redhat.com/show_bug.cgi?id=2539084
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89407
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89425
https://errata.almalinux.org/9/ALSA-2026-86706.html
https://errata.rockylinux.org/RLSA-2026:86706
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3
https://github.com/FasterXML/jackson-core/pull/1698
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11
https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf
https://linux.oracle.com/cve/CVE-2026-89425.html
https://linux.oracle.com/errata/ELSA-2026-86706.html
https://nvd.nist.gov/vuln/detail/CVE-2026-89425
https://www.cve.org/CVERecord?id=CVE-2026-89425
|
| com.fasterxml.jackson.core:jackson-core |
CVE-2025-49128 |
MEDIUM |
2.12.4 |
2.13.0 |
https://access.redhat.com/security/cve/CVE-2025-49128
https://advisory.echohq.com/cve/CVE-2025-49128
https://github.com/FasterXML/jackson-core
https://github.com/FasterXML/jackson-core/commit/a6c297682737dde13337cb7c3020f299518609a8
https://github.com/FasterXML/jackson-core/pull/652
https://github.com/FasterXML/jackson-core/security/advisories/GHSA-wf8f-6423-gfxg
https://github.com/advisories/GHSA-wf8f-6423-gfxg
https://nvd.nist.gov/vuln/detail/CVE-2021-22145
https://nvd.nist.gov/vuln/detail/CVE-2025-49128
https://www.cve.org/CVERecord?id=CVE-2025-49128
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2020-36518 |
HIGH |
2.12.4 |
2.13.2.1, 2.12.6.1 |
https://access.redhat.com/errata/RHSA-2023:2312
https://access.redhat.com/errata/RHSA-2024:3061
https://access.redhat.com/security/cve/CVE-2020-36518
https://bugzilla.redhat.com/2064698
https://bugzilla.redhat.com/show_bug.cgi?id=2064698
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-36518
https://errata.almalinux.org/9/ALSA-2023-2312.html
https://errata.rockylinux.org/RLSA-2024:3061
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0a8157c6ca478b1bc7be4ba7dccdb3863275f0de
https://github.com/FasterXML/jackson-databind/commit/3cc52f82ecf943e06c1d7c3b078e405fb3923d2b
https://github.com/FasterXML/jackson-databind/commit/8238ab41d0350fb915797c89d46777b4496b74fd
https://github.com/FasterXML/jackson-databind/commit/b3587924ee5d8695942f364d0d404d48d0ea6126
https://github.com/FasterXML/jackson-databind/commit/fcfc4998ec23f0b1f7f8a9521c2b317b6c25892b
https://github.com/FasterXML/jackson-databind/issues/2816
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13
https://github.com/advisories/GHSA-57j2-w4cx-62h2
https://linux.oracle.com/cve/CVE-2020-36518.html
https://linux.oracle.com/errata/ELSA-2024-3061.html
https://lists.debian.org/debian-lts-announce/2022/05/msg00001.html
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2020-36518
https://security.netapp.com/advisory/ntap-20220506-0004
https://security.netapp.com/advisory/ntap-20220506-0004/
https://www.cve.org/CVERecord?id=CVE-2020-36518
https://www.debian.org/security/2022/dsa-5283
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2021-46877 |
HIGH |
2.12.4 |
2.12.6, 2.13.1 |
https://access.redhat.com/security/cve/CVE-2021-46877
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-2.12.6%29
https://github.com/FasterXML/jackson-databind/commit/3ccde7d938fea547e598fdefe9a82cff37fed5cb%20%28jackson-databind-3.13.1%29
https://github.com/FasterXML/jackson-databind/issues/3328
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.6
https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.13.1
https://groups.google.com/g/jackson-user/c/OsBsirPM_Vw
https://nvd.nist.gov/vuln/detail/CVE-2021-46877
https://www.cve.org/CVERecord?id=CVE-2021-46877
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42003 |
HIGH |
2.12.4 |
2.12.7.1, 2.13.4.2 |
https://access.redhat.com/security/cve/CVE-2022-42003
https://advisory.echohq.com/cve/CVE-2022-42003
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51020
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/blob/2.13/release-notes/VERSION-2.x
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/2c4a601c626f7790cad9d3c322d244e182838288
https://github.com/FasterXML/jackson-databind/commit/7ba9ac5b87a9d6ac0d2815158ecbeb315ad4dcdc
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/commit/d499f2e7bbc5ebd63af11e1f5cf1989fa323aa45
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33
https://github.com/FasterXML/jackson-databind/commit/d78d00ee7b5245b93103fef3187f70543d67ca33%20%28jackson-databind-2.14.0-rc1%29
https://github.com/FasterXML/jackson-databind/commits/jackson-databind-2.4.0-rc1?after=75b97b8519f0d50c62523ad85170d80a197a2c86+174&branch=jackson-databind-2.4.0-rc1&qualified_name=refs%2Ftags%2Fjackson-databind-2.4.0-rc1
https://github.com/FasterXML/jackson-databind/compare/jackson-databind-2.13.4.1...jackson-databind-2.13.4.2
https://github.com/FasterXML/jackson-databind/issues/3590
https://github.com/FasterXML/jackson-databind/issues/3627
https://github.com/advisories/GHSA-jjjh-jjxp-wpff
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42003
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221124-0004
https://security.netapp.com/advisory/ntap-20221124-0004/
https://www.cve.org/CVERecord?id=CVE-2022-42003
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2022-42004 |
HIGH |
2.12.4 |
2.12.7.1, 2.13.4 |
https://access.redhat.com/security/cve/CVE-2022-42004
https://advisory.echohq.com/cve/CVE-2022-42004
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50490
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88
https://github.com/FasterXML/jackson-databind/commit/063183589218fec19a9293ed2f17ec53ea80ba88%20%28jackson-databind-2.13.4%29
https://github.com/FasterXML/jackson-databind/commit/0e37a39502439ecbaa1a5b5188387c01bf7f7fa1
https://github.com/FasterXML/jackson-databind/commit/35de19e7144c4df8ab178b800ba86e80c3d84252
https://github.com/FasterXML/jackson-databind/commit/cd090979b7ea78c75e4de8a4aed04f7e9fa8deea
https://github.com/FasterXML/jackson-databind/issues/3582
https://github.com/advisories/GHSA-rgv9-q543-rqg4
https://lists.debian.org/debian-lts-announce/2022/11/msg00035.html
https://nvd.nist.gov/vuln/detail/CVE-2022-42004
https://security.gentoo.org/glsa/202210-21
https://security.netapp.com/advisory/ntap-20221118-0008
https://security.netapp.com/advisory/ntap-20221118-0008/
https://www.cve.org/CVERecord?id=CVE-2022-42004
https://www.debian.org/security/2022/dsa-5283
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54512 |
HIGH |
2.12.4 |
2.18.8, 3.1.4, 2.21.4 |
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/security/cve/CVE-2026-54512
https://advisory.echohq.com/cve/CVE-2026-54512
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5
https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29
https://github.com/FasterXML/jackson-databind/issues/5988
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
https://linux.oracle.com/cve/CVE-2026-54512.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54512
https://www.cve.org/CVERecord?id=CVE-2026-54512
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54513 |
HIGH |
2.12.4 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:40895
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:43218
https://access.redhat.com/errata/RHSA-2026:43400
https://access.redhat.com/errata/RHSA-2026:44061
https://access.redhat.com/errata/RHSA-2026:44062
https://access.redhat.com/errata/RHSA-2026:44063
https://access.redhat.com/errata/RHSA-2026:44064
https://access.redhat.com/errata/RHSA-2026:44065
https://access.redhat.com/errata/RHSA-2026:44066
https://access.redhat.com/errata/RHSA-2026:44271
https://access.redhat.com/errata/RHSA-2026:48095
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/errata/RHSA-2026:50846
https://access.redhat.com/errata/RHSA-2026:50847
https://access.redhat.com/errata/RHSA-2026:50848
https://access.redhat.com/errata/RHSA-2026:50849
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:54622
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-54513
https://advisory.echohq.com/cve/CVE-2026-54513
https://bugzilla.redhat.com/2492010
https://bugzilla.redhat.com/2492015
https://bugzilla.redhat.com/show_bug.cgi?id=2492010
https://bugzilla.redhat.com/show_bug.cgi?id=2492015
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513
https://errata.almalinux.org/9/ALSA-2026-40895.html
https://errata.rockylinux.org/RLSA-2026:40895
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5
https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e
https://github.com/FasterXML/jackson-databind/issues/5981
https://github.com/FasterXML/jackson-databind/issues/5983
https://github.com/FasterXML/jackson-databind/pull/5984
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
https://linux.oracle.com/cve/CVE-2026-54513.html
https://linux.oracle.com/errata/ELSA-2026-43400.html
https://nvd.nist.gov/vuln/detail/CVE-2026-54513
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json
https://www.cve.org/CVERecord?id=CVE-2026-54513
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91776 |
HIGH |
2.12.4 |
2.18.11, 2.21.7, 2.22.3 |
https://access.redhat.com/security/cve/CVE-2026-91776
https://advisory.echohq.com/cve/CVE-2026-91776
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577
https://github.com/FasterXML/jackson-databind/issues/6203
https://github.com/FasterXML/jackson-databind/pull/6203
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54
https://nvd.nist.gov/vuln/detail/CVE-2026-91776
https://www.cve.org/CVERecord?id=CVE-2026-91776
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-91777 |
HIGH |
2.12.4 |
2.21.7, 2.18.11, 2.22.3 |
https://access.redhat.com/errata/RHSA-2026:85231
https://access.redhat.com/security/cve/CVE-2026-91777
https://advisory.echohq.com/cve/CVE-2026-91777
https://bugzilla.redhat.com/2539085
https://bugzilla.redhat.com/show_bug.cgi?id=2539085
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-91777
https://errata.almalinux.org/9/ALSA-2026-85231.html
https://errata.rockylinux.org/RLSA-2026:85231
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67
https://github.com/FasterXML/jackson-databind/issues/6204
https://github.com/FasterXML/jackson-databind/pull/6204
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24
https://linux.oracle.com/cve/CVE-2026-91777.html
https://linux.oracle.com/errata/ELSA-2026-85231.html
https://nvd.nist.gov/vuln/detail/CVE-2026-91777
https://www.cve.org/CVERecord?id=CVE-2026-91777
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-19032 |
MEDIUM |
2.12.4 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-19032
https://advisory.echohq.com/cve/CVE-2026-19032
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551
https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166
https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d
https://github.com/FasterXML/jackson-databind/pull/6129
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf
https://nvd.nist.gov/vuln/detail/CVE-2026-19032
https://www.cve.org/CVERecord?id=CVE-2026-19032
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-50193 |
MEDIUM |
2.12.4 |
2.14.0 |
https://access.redhat.com/security/cve/CVE-2026-50193
https://advisory.echohq.com/cve/CVE-2026-50193
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/a1fa4ae4ecf5cee16da465985f135f3e81816f8c
https://github.com/FasterXML/jackson-databind/issues/3447
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3wrr-7qpf-2prh
https://nvd.nist.gov/vuln/detail/CVE-2026-50193
https://www.cve.org/CVERecord?id=CVE-2026-50193
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54514 |
MEDIUM |
2.12.4 |
2.18.8, 2.21.4, 3.1.4 |
https://access.redhat.com/security/cve/CVE-2026-54514
https://advisory.echohq.com/cve/CVE-2026-54514
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4
https://github.com/FasterXML/jackson-databind/pull/5951
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5
https://nvd.nist.gov/vuln/detail/CVE-2026-54514
https://www.cve.org/CVERecord?id=CVE-2026-54514
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-54515 |
MEDIUM |
2.12.4 |
3.1.4, 2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-54515
https://advisory.echohq.com/cve/CVE-2026-54515
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa
https://github.com/FasterXML/jackson-databind/issues/5962
https://github.com/FasterXML/jackson-databind/issues/5964
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v
https://nvd.nist.gov/vuln/detail/CVE-2026-54515
https://www.cve.org/CVERecord?id=CVE-2026-54515
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-59889 |
MEDIUM |
2.12.4 |
2.21.5, 2.18.9, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-59889
https://advisory.echohq.com/cve/CVE-2026-59889
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b
https://github.com/FasterXML/jackson-databind/issues/6060
https://github.com/FasterXML/jackson-databind/pull/6056
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh
https://nvd.nist.gov/vuln/detail/CVE-2026-59889
https://www.cve.org/CVERecord?id=CVE-2026-59889
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-77310 |
MEDIUM |
2.12.4 |
2.18.9, 2.21.5, 2.22.1 |
https://access.redhat.com/security/cve/CVE-2026-77310
https://advisory.echohq.com/cve/CVE-2026-77310
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd
https://github.com/FasterXML/jackson-databind/pull/6058
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6
https://nvd.nist.gov/vuln/detail/CVE-2026-77310
https://www.cve.org/CVERecord?id=CVE-2026-77310
|
| com.fasterxml.jackson.core:jackson-databind |
CVE-2026-83557 |
MEDIUM |
2.12.4 |
2.18.10, 2.21.6, 2.22.2 |
https://access.redhat.com/security/cve/CVE-2026-83557
https://advisory.echohq.com/cve/CVE-2026-83557
https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557
https://github.com/FasterXML/jackson-databind
https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f
https://github.com/FasterXML/jackson-databind/issues/6156
https://github.com/FasterXML/jackson-databind/pull/6155
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6
https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j
https://nvd.nist.gov/vuln/detail/CVE-2026-83557
https://www.cve.org/CVERecord?id=CVE-2026-83557
|
| com.google.guava:guava |
CVE-2026-102554 |
HIGH |
20.0 |
33.7.2 |
https://access.redhat.com/security/cve/CVE-2026-102554
https://advisory.echohq.com/cve/CVE-2026-102554
https://github.com/advisories/GHSA-xxph-c9ww-hj94
https://github.com/google/guava
https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe
https://github.com/google/guava/releases/tag/v33.7.2
https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94
https://nvd.nist.gov/vuln/detail/CVE-2026-102554
https://www.cve.org/CVERecord?id=CVE-2026-102554
|
| com.google.guava:guava |
CVE-2018-10237 |
MEDIUM |
20.0 |
24.1.1-android |
http://www.securitytracker.com/id/1041707
https://access.redhat.com/errata/RHSA-2018:2423
https://access.redhat.com/errata/RHSA-2018:2424
https://access.redhat.com/errata/RHSA-2018:2425
https://access.redhat.com/errata/RHSA-2018:2428
https://access.redhat.com/errata/RHSA-2018:2598
https://access.redhat.com/errata/RHSA-2018:2643
https://access.redhat.com/errata/RHSA-2018:2740
https://access.redhat.com/errata/RHSA-2018:2741
https://access.redhat.com/errata/RHSA-2018:2742
https://access.redhat.com/errata/RHSA-2018:2743
https://access.redhat.com/errata/RHSA-2018:2927
https://access.redhat.com/errata/RHSA-2019:2858
https://access.redhat.com/errata/RHSA-2019:3149
https://access.redhat.com/security/cve/CVE-2018-10237
https://advisory.echohq.com/cve/CVE-2018-10237
https://github.com/advisories/GHSA-mvr2-9pj6-7w5j
https://github.com/google/guava
https://github.com/google/guava/wiki/CVE-2018-10237
https://groups.google.com/d/topic/guava-announce/xqWALw4W1vs/discussion
https://groups.google.com/forum/#!topic/guava-announce/xqWALw4W1vs/discussion
https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/19fa48533bc7ea1accf6b12746a74ed888ae6e49a5cf81ae4f807495@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/33c6bccfeb7adf644d4d79894ca8f09370be6ed4b20632c2e228d085@%3Ccommits.cassandra.apache.org%3E
https://lists.apache.org/thread.html/3d5dbdd92ac9ceaef90e40f78599f9109f2f345252e0ac9d98e7e084@%3Cgitbox.activemq.apache.org%3E
https://lists.apache.org/thread.html/3ddd79c801edd99c0978e83dbe2168ebd36fd42acfa5dac38fb03dd6@%3Cissues.activemq.apache.org%3E
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/cc48fe770c45a74dc3b37ed0817393e0c96701fc49bc431ed922f3cc@%3Chdfs-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r02e39d7beb32eebcdbb4b516e95f67d71c90d5d462b26f4078d21eeb@%3Cuser.flink.apache.org%3E
https://lists.apache.org/thread.html/r223bc776a077d0795786c38cbc6e7dd808fce1a9161b00ba9c0a5d55@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r22c8173b804cd4a420c43064ba4e363d0022aa421008b1989f7354d4@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/r27eb79a87a760335226dbfa6a7b7bffea539a535f8e80c41e482106d@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r2ea4e5e5aa8ad73b001a466c582899620961f47d77a40af712c1fdf9@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r30e7d7b6bfa630dacc41649a0e96dad75165d50474c1241068aa0f94@%3Cissues.storm.apache.org%3E
https://lists.apache.org/thread.html/r352e40ca9874d1beb4ad95403792adca7eb295e6bc3bd7b65fabcc21@%3Ccommits.samza.apache.org%3E
https://lists.apache.org/thread.html/r38e2ab87528d3c904e7fac496e8fd766b9277656ff95b97d6b6b6dcd@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r43491b25b2e5c368c34b106a82eff910a5cea3e90de82ad75cc16540@%3Cdev.syncope.apache.org%3E
https://lists.apache.org/thread.html/r50fc0bcc734dd82e691d36d209258683141bfc0083739a77e56ad92d@%3Cdev.flink.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r95799427b335807a4c54776908125c3e66597b65845ae50096d9278a@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/ra0adb9653c7de9539b93cc8434143b655f753b9f60580ff260becb2b@%3Cusers.kafka.apache.org%3E
https://lists.apache.org/thread.html/ra4f44016926dcb034b3b230280a18102062f94ae55b8a31bb92fed84@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/ra8906723927aef2a599398c238eacfc845b74d812e0093ec2fc70a7d@%3Cissues.flink.apache.org%3E
https://lists.apache.org/thread.html/rb3da574c34bc6bd37972d2266af3093b90d7e437460423c24f477919@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc78f6e84f82cc662860e96526d8ab969f34dbe12dc560e22d9d147a3@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rc8467f357b943ceaa86f289f8bc1a5d1c7955b75d3bac1426f2d4ac1@%3Ccommon-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd0c8ec6e044aa2958dd0549ebf8ecead7f5968c9474ba73a504161b2@%3Cdev.cxf.apache.org%3E
https://lists.apache.org/thread.html/rdc56c15693c236e31e1e95f847b8e5e74fc0a05741d47488e7fc8c45@%3Cissues.flink.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2018-10237
https://security.netapp.com/advisory/ntap-20220629-0008
https://security.netapp.com/advisory/ntap-20220629-0008/
https://www.cve.org/CVERecord?id=CVE-2018-10237
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.google.guava:guava |
CVE-2023-2976 |
MEDIUM |
20.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2023-2976
https://advisory.echohq.com/cve/CVE-2023-2976
https://github.com/advisories/GHSA-7g45-4rm6-3mm3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/6532
https://github.com/google/guava/releases/tag/v32.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-2976
https://security.netapp.com/advisory/ntap-20230818-0008
https://security.netapp.com/advisory/ntap-20230818-0008/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://www.cve.org/CVERecord?id=CVE-2023-2976
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01006.html
|
| com.google.guava:guava |
CVE-2020-8908 |
LOW |
20.0 |
32.0.0-android |
https://access.redhat.com/security/cve/CVE-2020-8908
https://advisory.echohq.com/cve/CVE-2020-8908
https://github.com/advisories/GHSA-5mg8-w23w-74h3
https://github.com/google/guava
https://github.com/google/guava/commit/feb83a1c8fd2e7670b244d5afd23cba5aca43284
https://github.com/google/guava/commit/fec0dbc4634006a6162cfd4d0d09c962073ddf40
https://github.com/google/guava/issues/2575
https://github.com/google/guava/issues/4011
https://github.com/google/guava/issues/4011#issuecomment-1573923586
https://github.com/google/guava/issues/4011#issuecomment-1578991974
https://github.com/google/guava/releases/tag/v32.0.0
https://lists.apache.org/thread.html/r007add131977f4f576c232b25e024249a3d16f66aad14a4b52819d21@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r037fed1d0ebde50c9caf8d99815db3093c344c3f651c5a49a09824ce@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r07ed3e4417ad043a27bee7bb33322e9bfc7d7e6d1719b8e3dfd95c14@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r161b87f8037bbaff400194a63cd2016c9a69f5949f06dcc79beeab54@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r215b3d50f56faeb2f9383505f3e62faa9f549bb23e8a9848b78a968e@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r294be9d31c0312d2c0837087204b5d4bf49d0552890e6eec716fa6a6@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r2fe45d96eea8434b91592ca08109118f6308d60f6d0e21d52438cfb4@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r3c3b33ee5bef0c67391d27a97cbfd89d44f328cf072b601b58d4e748@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/r3dd8881de891598d622227e9840dd7c2ef1d08abbb49e9690c7ae1bc@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r4776f62dfae4a0006658542f43034a7fc199350e35a66d4e18164ee6@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/r49549a8322f62cd3acfa4490d25bfba0be04f3f9ff4d14fe36199d27@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r58a8775205ab1839dba43054b09a9ab3b25b423a4170b2413c4067ac@%3Ccommon-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r5b3d93dfdfb7708e796e8762ab40edbde8ff8add48aba53e5ea26f44@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/r5d61b98ceb7bba939a651de5900dbd67be3817db6bfcc41c6e04e199@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r6874dfe26eefc41b7c9a5e4a0487846fc4accf8c78ff948b24a1104a@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r68d86f4b06c808204f62bcb254fcb5b0432528ee8d37a07ef4bc8222@%3Ccommits.ws.apache.org%3E
https://lists.apache.org/thread.html/r79e47ed555bdb1180e528420a7a2bb898541367a29a3bc6bbf0baf2c@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r7b0e81d8367264d6cad98766a469d64d11248eb654417809bfdacf09@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/r841c5e14e1b55281523ebcde661ece00b38a0569e00ef5e12bd5f6ba@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra7ab308481ee729f998691e8e3e02e93b1dedfc98f6b1cd3d86923b3@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rb2364f4cf4d274eab5a7ecfaf64bf575cedf8b0173551997c749d322@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rb8c0f1b7589864396690fe42a91a71dea9412e86eec66dc85bbacaaf@%3Ccommits.cxf.apache.org%3E
https://lists.apache.org/thread.html/rbc7642b9800249553f13457e46b813bea1aec99d2bc9106510e00ff3@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc2dbc4633a6eea1fcbce6831876cfa17b73759a98c65326d1896cb1a@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rc607bc52f3507b8b9c28c6a747c3122f51ac24afe80af2a670785b97@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rcafc3a637d82bdc9a24036b2ddcad1e519dd0e6f848fcc3d606fd78f@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/rd01f5ff0164c468ec7abc96ff7646cea3cce6378da2e4aa29c6bcb95@%3Cgithub.arrow.apache.org%3E
https://lists.apache.org/thread.html/rd2704306ec729ccac726e50339b8a8f079515cc29ccb77713b16e7c5@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/rd5d58088812cf8e677d99b07f73c654014c524c94e7fedbdee047604@%3Ctorque-dev.db.apache.org%3E
https://lists.apache.org/thread.html/rd7e12d56d49d73e2b8549694974b07561b79b05455f7f781954231bf@%3Cdev.pig.apache.org%3E
https://lists.apache.org/thread.html/re120f6b3d2f8222121080342c5801fdafca2f5188ceeb3b49c8a1d27@%3Cyarn-issues.hadoop.apache.org%3E
https://lists.apache.org/thread.html/reebbd63c25bc1a946caa419cec2be78079f8449d1af48e52d47c9e85@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rf00b688ffa620c990597f829ff85fdbba8bf73ee7bfb34783e1f0d4e@%3Cyarn-dev.hadoop.apache.org%3E
https://lists.apache.org/thread.html/rf9f0fa84b8ae1a285f0210bafec6de2a9eba083007d04640b82aa625@%3Cissues.geode.apache.org%3E
https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594@%3Cdev.myfaces.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-8908
https://security.netapp.com/advisory/ntap-20220210-0003
https://security.netapp.com/advisory/ntap-20220210-0003/
https://snyk.io/vuln/SNYK-JAVA-COMGOOGLEGUAVA-1015415
https://www.cve.org/CVERecord?id=CVE-2020-8908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| com.h2database:h2 |
CVE-2021-42392 |
CRITICAL |
1.4.200 |
2.0.206 |
https://access.redhat.com/security/cve/CVE-2021-42392
https://github.com/h2database/h2database
https://github.com/h2database/h2database/releases/tag/version-2.0.206
https://github.com/h2database/h2database/security/advisories/GHSA-h376-j262-vhq6
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console
https://jfrog.com/blog/the-jndi-strikes-back-unauthenticated-rce-in-h2-database-console/
https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2021-42392
https://security.netapp.com/advisory/ntap-20220119-0001
https://security.netapp.com/advisory/ntap-20220119-0001/
https://ubuntu.com/security/notices/USN-5365-1
https://ubuntu.com/security/notices/USN-6834-1
https://www.cve.org/CVERecord?id=CVE-2021-42392
https://www.debian.org/security/2022/dsa-5076
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console
https://www.secpod.com/blog/log4shell-critical-remote-code-execution-vulnerability-in-h2database-console/
|
| com.h2database:h2 |
CVE-2022-23221 |
CRITICAL |
1.4.200 |
2.1.210 |
http://packetstormsecurity.com/files/165676/H2-Database-Console-Remote-Code-Execution.html
http://seclists.org/fulldisclosure/2022/Jan/39
https://access.redhat.com/security/cve/CVE-2022-23221
https://github.com/advisories/GHSA-45hx-wfhj-473x
https://github.com/h2database/h2database
https://github.com/h2database/h2database/releases/tag/version-2.1.210
https://github.com/h2database/h2database/security/advisories
https://lists.debian.org/debian-lts-announce/2022/02/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2022-23221
https://security.netapp.com/advisory/ntap-20230818-0011
https://security.netapp.com/advisory/ntap-20230818-0011/
https://twitter.com/d0nkey_man/status/1483824727936450564
https://ubuntu.com/security/notices/USN-5365-1
https://ubuntu.com/security/notices/USN-6834-1
https://www.cve.org/CVERecord?id=CVE-2022-23221
https://www.debian.org/security/2022/dsa-5076
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| com.h2database:h2 |
CVE-2021-23463 |
HIGH |
1.4.200 |
2.0.202 |
https://access.redhat.com/security/cve/CVE-2021-23463
https://github.com/boris-unckel/h2database/commit/f9ad6aef2bfa59eba2b4d3e7c4c32d2cce8e8b05
https://github.com/h2database/h2database
https://github.com/h2database/h2database/commit/d83285fd2e48fb075780ee95badee6f5a15ea7f8%23diff-008c2e4462609982199cd83e7cf6f1d6b41296b516783f6752c44b9f15dc7bc3
https://github.com/h2database/h2database/issues/3195
https://github.com/h2database/h2database/pull/3199
https://github.com/h2database/h2database/pull/3199#issuecomment-1002830390
https://nvd.nist.gov/vuln/detail/CVE-2021-23463
https://security.netapp.com/advisory/ntap-20230818-0010
https://security.netapp.com/advisory/ntap-20230818-0010/
https://snyk.io/vuln/SNYK-JAVA-COMH2DATABASE-1769238
https://www.cve.org/CVERecord?id=CVE-2021-23463
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| com.h2database:h2 |
CVE-2022-45868 |
HIGH |
1.4.200 |
2.2.220 |
https://github.com/advisories/GHSA-22wj-vf5f-wrvj
https://github.com/h2database/h2database
https://github.com/h2database/h2database/blob/96832bf5a97cdc0adc1f2066ed61c54990d66ab5/h2/src/main/org/h2/server/web/WebServer.java#L346-L347
https://github.com/h2database/h2database/commit/581ed18ff9d6b3761d851620ed88a3994a351a0d
https://github.com/h2database/h2database/issues/3686
https://github.com/h2database/h2database/pull/3833
https://github.com/h2database/h2database/releases/tag/version-2.2.220
https://nvd.nist.gov/vuln/detail/CVE-2022-45868
https://sites.google.com/sonatype.com/vulnerabilities/sonatype-2022-6243
|
| com.jayway.jsonpath:json-path |
CVE-2023-51074 |
MEDIUM |
2.4.0 |
2.9.0 |
https://access.redhat.com/security/cve/CVE-2023-51074
https://github.com/json-path/JsonPath
https://github.com/json-path/JsonPath/commit/71a09c1193726c010917f1157ecbb069ad6c3e3b
https://github.com/json-path/JsonPath/issues/973
https://github.com/json-path/JsonPath/releases/tag/json-path-2.9.0
https://nvd.nist.gov/vuln/detail/CVE-2023-51074
https://www.cve.org/CVERecord?id=CVE-2023-51074
|
| commons-io:commons-io |
CVE-2024-47554 |
HIGH |
2.11.0 |
2.14.0 |
http://www.openwall.com/lists/oss-security/2024/10/03/2
https://access.redhat.com/security/cve/CVE-2024-47554
https://advisory.echohq.com/cve/CVE-2024-47554
https://github.com/advisories/GHSA-78wr-2p64-hpwj
https://github.com/apache/commons-io
https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1
https://nvd.nist.gov/vuln/detail/CVE-2024-47554
https://security.netapp.com/advisory/ntap-20250131-0010
https://security.netapp.com/advisory/ntap-20250131-0010/
https://ubuntu.com/security/notices/USN-8191-1
https://www.cve.org/CVERecord?id=CVE-2024-47554
|
| io.micrometer:micrometer-core |
CVE-2026-40984 |
HIGH |
1.5.1 |
1.16.6, 1.15.12 |
https://access.redhat.com/errata/RHSA-2026:36839
https://access.redhat.com/errata/RHSA-2026:37390
https://access.redhat.com/errata/RHSA-2026:41951
https://access.redhat.com/errata/RHSA-2026:50848
https://access.redhat.com/errata/RHSA-2026:50849
https://access.redhat.com/errata/RHSA-2026:54435
https://access.redhat.com/errata/RHSA-2026:62260
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-40984
https://advisory.echohq.com/cve/CVE-2026-40984
https://bugzilla.redhat.com/show_bug.cgi?id=2486716
https://github.com/micrometer-metrics/micrometer
https://github.com/micrometer-metrics/micrometer/commit/36da131525228188a36779a28471a76c79213dd4
https://nvd.nist.gov/vuln/detail/CVE-2026-40984
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40984.json
https://spring.io/security/cve-2026-40984
https://www.cve.org/CVERecord?id=CVE-2026-40984
|
| io.springfox:springfox-swagger-ui |
CVE-2019-17495 |
CRITICAL |
2.9.2 |
2.10.0 |
https://github.com/springfox/springfox/commit/26f72f0d16b166e12c20255a4ee907dc10685cf8
https://github.com/swagger-api/swagger-ui
https://github.com/swagger-api/swagger-ui/releases/tag/v3.23.11
https://github.com/tarantula-team/CSS-injection-in-Swagger-UI
https://lists.apache.org/thread.html/r103579b01da2d0aa0f672b88f811224bbf8ef493aaad845895955e91@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r3acb7e494cf1aab99b6784b7c5bbddfd0d4f8a484ab534c3a61ef9cf@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r84b327f7a8b6b28857b906c07a66dd98e1d341191fa8d7816514ef96@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/r853ffeb915a400f899de78124d4e0d77a19379d2e11bf8f4e98c624f@%3Ccommits.airflow.apache.org%3E
https://lists.apache.org/thread.html/ref70b940c4f69560d29d6ba792d6c82865e74de3dcad4c92d99b1f8f@%3Ccommits.airflow.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-17495
https://security.snyk.io/vuln/maven?search=CVE-2019-17495
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.oracle.com/security-alerts/cpuoct2020.html
|
| net.minidev:json-smart |
CVE-2023-1370 |
HIGH |
2.3 |
2.4.9 |
https://access.redhat.com/security/cve/CVE-2023-1370
https://advisory.echohq.com/cve/CVE-2023-1370
https://github.com/advisories/GHSA-493p-pfq6-5258
https://github.com/netplex/json-smart-v2/commit/5b3205d051952d3100aa0db1535f6ba6226bd87a
https://github.com/netplex/json-smart-v2/commit/e2791ae506a57491bc856b439d706c81e45adcf8
https://github.com/netplex/json-smart-v2/issues/137
https://github.com/oswaldobapvicjr/jsonmerge
https://nvd.nist.gov/vuln/detail/CVE-2023-1370
https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633
https://research.jfrog.com/vulnerabilities/stack-exhaustion-in-json-smart-leads-to-denial-of-service-when-parsing-malformed-json-xray-427633/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://security.snyk.io/vuln/SNYK-JAVA-NETMINIDEV-3369748
https://ubuntu.com/security/notices/USN-6011-1
https://www.cve.org/CVERecord?id=CVE-2023-1370
|
| net.minidev:json-smart |
CVE-2021-27568 |
MEDIUM |
2.3 |
1.3.2, 2.4.1, 2.3.1 |
https://access.redhat.com/security/cve/CVE-2021-27568
https://github.com/netplex/json-smart-v1/commit/768db58ee0e3e344fcdb574b7629765308a1d0af
https://github.com/netplex/json-smart-v1/issues/7
https://github.com/netplex/json-smart-v2
https://github.com/netplex/json-smart-v2/issues/60
https://github.com/netplex/json-smart-v2/issues/62
https://github.com/netplex/json-smart-v2/pull/72
https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/re237267da268c690df5e1c6ea6a38a7fc11617725e8049490f58a6fa@%3Ccommits.druid.apache.org%3E
https://lists.apache.org/thread.html/rf70210b4d63191c0bfb2a0d5745e104484e71703bf5ad9cb01c980c6@%3Ccommits.druid.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-27568
https://www.cve.org/CVERecord?id=CVE-2021-27568
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
|
| org.apache.commons:commons-compress |
CVE-2024-25710 |
MEDIUM |
1.21 |
1.26.0 |
http://seclists.org/fulldisclosure/2024/Aug/37
http://www.openwall.com/lists/oss-security/2024/02/19/1
https://access.redhat.com/security/cve/CVE-2024-25710
https://advisory.echohq.com/cve/CVE-2024-25710
https://github.com/advisories/GHSA-4g9r-vxhx-9pgx
https://github.com/apache/commons-compress
https://lists.apache.org/thread/cz8qkcwphy4cx8gltn932ln51cbtq6kf
https://nvd.nist.gov/vuln/detail/CVE-2024-25710
https://security.netapp.com/advisory/ntap-20240307-0010
https://security.netapp.com/advisory/ntap-20240307-0010/
https://www.cve.org/CVERecord?id=CVE-2024-25710
|
| org.apache.commons:commons-compress |
CVE-2024-26308 |
MEDIUM |
1.21 |
1.26.0 |
http://www.openwall.com/lists/oss-security/2024/02/19/2
https://access.redhat.com/security/cve/CVE-2024-26308
https://advisory.echohq.com/cve/CVE-2024-26308
https://github.com/advisories/GHSA-4265-ccf5-phj5
https://github.com/apache/commons-compress
https://lists.apache.org/thread/ch5yo2d21p7vlqrhll9b17otbyq4npfg
https://nvd.nist.gov/vuln/detail/CVE-2024-26308
https://security.netapp.com/advisory/ntap-20240307-0009
https://security.netapp.com/advisory/ntap-20240307-0009/
https://www.cve.org/CVERecord?id=CVE-2024-26308
https://www.openwall.com/lists/oss-security/2024/02/19/2
|
| org.apache.commons:commons-lang3 |
CVE-2025-48924 |
MEDIUM |
3.10 |
3.18.0 |
http://www.openwall.com/lists/oss-security/2025/07/11/1
https://access.redhat.com/security/cve/CVE-2025-48924
https://advisory.echohq.com/cve/CVE-2025-48924
https://github.com/apache/commons-lang
https://github.com/apache/commons-lang/commit/b424803abdb2bec818e4fbcb251ce031c22aca53
https://lists.apache.org/thread/bgv0lpswokgol11tloxnjfzdl7yrc1g1
https://lists.debian.org/debian-lts-announce/2025/08/msg00000.html
https://lists.debian.org/debian-lts-announce/2025/08/msg00026.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00032.html
https://lists.debian.org/debian-lts-announce/2025/09/msg00036.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48924
https://ubuntu.com/security/notices/USN-8364-1
https://www.cve.org/CVERecord?id=CVE-2025-48924
https://www.openwall.com/lists/oss-security/2025/07/11/1
|
| org.apache.httpcomponents:httpclient |
CVE-2020-13956 |
MEDIUM |
4.5.12 |
4.5.13, 5.0.3 |
https://access.redhat.com/security/cve/CVE-2020-13956
https://advisory.echohq.com/cve/CVE-2020-13956
https://bugzilla.redhat.com/show_bug.cgi?id=1886587
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13956
https://errata.almalinux.org/8/ALSA-2022-1861.html
https://errata.rockylinux.org/RLSA-2022:1861
https://github.com/advisories/GHSA-7r82-7xv7-xcpj
https://github.com/apache/httpcomponents-client
https://linux.oracle.com/cve/CVE-2020-13956.html
https://linux.oracle.com/errata/ELSA-2022-1861.html
https://lists.apache.org/thread.html/r03bbc318c81be21f5c8a9b85e34f2ecc741aa804a8e43b0ef2c37749@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r043a75acdeb52b15dd5e9524cdadef4202e6a5228644206acf9363f9@%3Cdev.hive.apache.org%3E
https://lists.apache.org/thread.html/r06cf3ca5c8ceb94b39cd24a73d4e96153b485a7dac88444dd876accb@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/r0a75b8f0f72f3e18442dc56d33f3827b905f2fe5b7ba48997436f5d1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r0bebe6f9808ac7bdf572873b4fa96a29c6398c90dab29f131f3ebffe@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r12cb62751b35bdcda0ae2a08b67877d665a1f4d41eee0fa7367169e0@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r132e4c6a560cfc519caa1aaee63bdd4036327610eadbd89f76dd5457@%3Cdev.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2835543ef0f91adcc47da72389b816e36936f584c7be584d2314fac3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r2a03dc210231d7e852ef73015f71792ac0fcaca6cccc024c522ef17d@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r2dc7930b43eadc78220d269b79e13ecd387e4bee52db67b2f47d4303@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/r34178ab6ef106bc940665fd3f4ba5026fac3603b3fa2aefafa0b619d@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r34efec51cb817397ccf9f86e25a75676d435ba5f83ee7b2eabdad707@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r3cecd59fba74404cbf4eb430135e1080897fb376f111406a78bed13a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r3f740e4c38bba1face49078aa5cbeeb558c27be601cc9712ad2dcd1e@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r4850b3fbaea02fde2886e461005e4af8d37c80a48b3ce2a6edca0e30@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r549ac8c159bf0c568c19670bedeb8d7c0074beded951d34b1c1d0d05@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r55b2a1d1e9b1ec9db792b93da8f0f99a4fd5a5310b02673359d9b4d1@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/r5b55f65c123a7481104d663a915ec45a0d103e6aaa03f42ed1c07a89@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/r5de3d3808e7b5028df966e45115e006456c4e8931dc1e29036f17927@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r5fec9c1d67f928179adf484b01e7becd7c0a6fdfe3a08f92ea743b90@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/r63296c45d5d84447babaf39bd1487329d8a80d8d563e67a4b6f3d8a7@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r69a94e2f302d1b778bdfefe90fcb4b8c50b226438c3c8c1d0de85a19@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/r6a3cda38d050ebe13c1bc9a28d0a8ec38945095d07eca49046bcb89f@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/r6d672b46622842e565e00f6ef6bef83eb55d8792aac2bee75bff9a2a@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/r6dab7da30f8bf075f79ee189e33b45a197502e2676481bb8787fc0d7@%3Cdev.hc.apache.org%3E
https://lists.apache.org/thread.html/r6eb2dae157dbc9af1f30d1f64e9c60d4ebef618f3dce4a0e32d6ea4d@%3Ccommits.drill.apache.org%3E
https://lists.apache.org/thread.html/r70c429923100c5a4fae8e5bc71c8a2d39af3de4888f50a0ac3755e6f@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/r87ddc09295c27f25471269ad0a79433a91224045988b88f0413a97ec@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/r8aa1e5c343b89aec5b69961471950e862f15246cb6392910161c389b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/r9e52a6c72c8365000ecd035e48cc9fee5a677a150350d4420c46443d@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/ra539f20ef0fb0c27ee39945b5f56bf162e5c13d1c60f7344dab8de3b@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/ra8bc6b61c5df301a6fe5a716315528ecd17ccb8a7f907e24a47a1a5e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rad6222134183046f3928f733bf680919e0c390739bfbfe6c90049673@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/rae14ae25ff4a60251e3ba2629c082c5ba3851dfd4d21218b99b56652@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rb33212dab7beccaf1ffef9b88610047c644f644c7a0ebdc44d77e381@%3Ccommits.turbine.apache.org%3E
https://lists.apache.org/thread.html/rb4ba262d6f08ab9cf8b1ebbcd9b00b0368ffe90dad7ad7918b4b56fc@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rb725052404fabffbe093c83b2c46f3f87e12c3193a82379afbc529f8@%3Csolr-user.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc0863892ccfd9fd0d0ae10091f24ee769fb39b8957fe4ebabfc11f17@%3Cdev.jackrabbit.apache.org%3E
https://lists.apache.org/thread.html/rc3739e0ad4bcf1888c6925233bfc37dd71156bbc8416604833095c42@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rc505fee574fe8d18f9b0c655a4d120b0ae21bb6a73b96003e1d9be35@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rc5c6ccb86d2afe46bbd4b71573f0448dc1f87bbcd5a0d8c7f8f904b2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rc990e2462ec32b09523deafb2c73606208599e196fa2d7f50bdbc587@%3Cissues.maven.apache.org%3E
https://lists.apache.org/thread.html/rcced7ed3237c29cd19c1e9bf465d0038b8b2e967b99fc283db7ca553@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rcd9ad5dda60c82ab0d0c9bd3e9cb1dc740804451fc20c7f451ef5cc4@%3Cgitbox.hive.apache.org%3E
https://lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E
https://lists.apache.org/thread.html/rd5ab56beb2ac6879f6ab427bc4e5f7691aed8362d17b713f61779858@%3Cissues.hive.apache.org%3E
https://lists.apache.org/thread.html/re504acd4d63b8df2a7353658f45c9a3137e5f80e41cf7de50058b2c1@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rea3dbf633dde5008d38bf6600a3738b9216e733e03f9ff7becf79625@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/ree942561f4620313c75982a4e5f3b74fe6f7062b073210779648eec2@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/reef569c2419705754a3acf42b5f19b2a158153cef0e448158bc54917@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/rf03228972e56cb4a03e6d9558188c2938078cf3ceb23a3fead87c9ca@%3Cissues.bookkeeper.apache.org%3E
https://lists.apache.org/thread.html/rf43d17ed0d1fb4fb79036b582810ef60b18b1ef3add0d5dea825af1e@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf4db88c22e1be9eb60c7dc623d0528642c045fb196a24774ac2fa3a3@%3Cissues.lucene.apache.org%3E
https://lists.apache.org/thread.html/rf7ca60f78f05b772cc07d27e31bcd112f9910a05caf9095e38ee150f@%3Cdev.ranger.apache.org%3E
https://lists.apache.org/thread.html/rfb35f6db9ba1f1e061b63769a4eff5abadcc254ebfefc280e5a0dcf1@%3Ccommits.creadur.apache.org%3E
https://lists.apache.org/thread.html/rfbedcb586a1e7dfce87ee03c720e583fc2ceeafa05f35c542cecc624@%3Cissues.solr.apache.org%3E
https://lists.apache.org/thread.html/rfc00884c7b7ca878297bffe45fcb742c362b00b26ba37070706d44c3@%3Cissues.hive.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2020-13956
https://priyankn.github.io/2021-02-26-CVE-2020-13956/
https://security.netapp.com/advisory/ntap-20220210-0002
https://security.netapp.com/advisory/ntap-20220210-0002/
https://ubuntu.com/security/notices/USN-5239-1
https://www.cve.org/CVERecord?id=CVE-2020-13956
https://www.openwall.com/lists/oss-security/2020/10/08/4
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.logging.log4j:log4j-api |
CVE-2026-49844 |
MEDIUM |
2.17.0 |
2.25.5, 2.26.1 |
https://access.redhat.com/security/cve/CVE-2026-49844
https://advisory.echohq.com/cve/CVE-2026-49844
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300
https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82
https://github.com/apache/logging-log4j2/pull/4163
https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5
https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message
https://logging.apache.org/security.html#CVE-2026-49844
https://nvd.nist.gov/vuln/detail/CVE-2026-49844
https://www.cve.org/CVERecord?id=CVE-2026-49844
|
| org.apache.logging.log4j:log4j-core |
CVE-2021-44832 |
MEDIUM |
2.17.0 |
2.3.2, 2.12.4, 2.17.1 |
http://www.openwall.com/lists/oss-security/2021/12/28/1
https://access.redhat.com/security/cve/CVE-2021-44832
https://cert-portal.siemens.com/productcert/pdf/ssa-784507.pdf
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/05db5f9527254632b59aed2a1d78a32c5ab74f16
https://issues.apache.org/jira/browse/LOG4J2-3293
https://lists.apache.org/thread/s1o5vlo78ypqxnzn6p8zf6t9shtq5143
https://lists.debian.org/debian-lts-announce/2021/12/msg00036.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVV25FXL4FU5X6X5BSL7RLQ7T6F65MRA/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T57MPJUW3MA6QGWZRTMCHHMMPQNVKGFC/
https://nvd.nist.gov/vuln/detail/CVE-2021-44832
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
https://security.netapp.com/advisory/ntap-20220104-0001
https://security.netapp.com/advisory/ntap-20220104-0001/
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd
https://ubuntu.com/security/notices/USN-5222-1
https://www.cve.org/CVERecord?id=CVE-2021-44832
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.apache.logging.log4j:log4j-core |
CVE-2025-68161 |
MEDIUM |
2.17.0 |
2.25.3 |
http://www.openwall.com/lists/oss-security/2025/12/18/1
https://access.redhat.com/security/cve/CVE-2025-68161
https://advisory.echohq.com/cve/CVE-2025-68161
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/commit/3b93748497e1adbbd027fda8a5e7268ec5d0d578
https://github.com/apache/logging-log4j2/pull/4002
https://lists.apache.org/thread/xr33kyxq3sl67lwb61ggvm1fzc8k7dvx
https://lists.debian.org/debian-lts-announce/2026/01/msg00015.html
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName
https://logging.apache.org/log4j/2.x/manual/systemproperties.html#log4j2.sslVerifyHostName
https://logging.apache.org/security.html#CVE-2025-68161
https://nvd.nist.gov/vuln/detail/CVE-2025-68161
https://www.cve.org/CVERecord?id=CVE-2025-68161
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34477 |
MEDIUM |
2.17.0 |
2.25.4 |
https://access.redhat.com/security/cve/CVE-2026-34477
https://advisory.echohq.com/cve/CVE-2026-34477
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4075
https://lists.apache.org/thread/lkx8cl46t2bvkcwfcb2pd43ygc097lq4
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName
https://logging.apache.org/security.html#CVE-2026-34477
https://nvd.nist.gov/vuln/detail/CVE-2026-34477
https://www.cve.org/CVERecord?id=CVE-2026-34477
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34479 |
MEDIUM |
2.17.0 |
2.25.4 |
http://www.openwall.com/lists/oss-security/2026/04/10/8
https://access.redhat.com/security/cve/CVE-2026-34479
https://advisory.echohq.com/cve/CVE-2026-34479
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4078
https://lists.apache.org/thread/gd0hp6mj17rn3kj279vgy4p7kd4zz5on
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/migrate-from-log4j1.html
https://logging.apache.org/security.html#CVE-2026-34479
https://nvd.nist.gov/vuln/detail/CVE-2026-34479
https://www.cve.org/CVERecord?id=CVE-2026-34479
|
| org.apache.logging.log4j:log4j-core |
CVE-2026-34480 |
MEDIUM |
2.17.0 |
2.25.4 |
http://www.openwall.com/lists/oss-security/2026/04/10/9
https://access.redhat.com/security/cve/CVE-2026-34480
https://advisory.echohq.com/cve/CVE-2026-34480
https://github.com/apache/logging-log4j2
https://github.com/apache/logging-log4j2/pull/4077
https://lists.apache.org/thread/5x0hcnng0chhghp6jgjdp3qmbbhfjzhb
https://logging.apache.org/cyclonedx/vdr.xml
https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout
https://logging.apache.org/security.html#CVE-2026-34480
https://nvd.nist.gov/vuln/detail/CVE-2026-34480
https://www.cve.org/CVERecord?id=CVE-2026-34480
|
| org.apache.poi:poi-ooxml |
CVE-2025-31672 |
MEDIUM |
5.2.2 |
5.4.0 |
http://www.openwall.com/lists/oss-security/2025/04/08/2
https://access.redhat.com/security/cve/CVE-2025-31672
https://advisory.echohq.com/cve/CVE-2025-31672
https://bz.apache.org/bugzilla/show_bug.cgi?id=69620
https://github.com/advisories/GHSA-gmg8-593g-7mv3
https://github.com/apache/poi
https://lists.apache.org/thread/k14w8vcjqy4h34hh5kzldko78kpylkq5
https://nvd.nist.gov/vuln/detail/CVE-2025-31672
https://security.netapp.com/advisory/ntap-20250523-0004
https://security.netapp.com/advisory/ntap-20250523-0004/
https://www.cve.org/CVERecord?id=CVE-2025-31672
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-24813 |
CRITICAL |
9.0.35 |
11.0.3, 10.1.35, 9.0.99 |
http://www.openwall.com/lists/oss-security/2025/03/10/5
https://access.redhat.com/errata/RHSA-2025:3645
https://access.redhat.com/security/cve/CVE-2025-24813
https://bugzilla.redhat.com/2332817
https://bugzilla.redhat.com/2351129
https://bugzilla.redhat.com/show_bug.cgi?id=2332817
https://bugzilla.redhat.com/show_bug.cgi?id=2351129
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50379
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24813
https://errata.almalinux.org/9/ALSA-2025-3645.html
https://errata.rockylinux.org/RLSA-2025:3645
https://github.com/absholi7ly/POC-CVE-2025-24813/blob/main/README.md
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0a668e0c27f2b7ca0cc7c6eea32253b9b5ecb29c
https://github.com/apache/tomcat/commit/eb61aade8f8daccaecabf07d428b877975622f72
https://github.com/apache/tomcat/commit/f6c01d6577cf9a1e06792be47e623d36acc3b5dc
https://linux.oracle.com/cve/CVE-2025-24813.html
https://linux.oracle.com/errata/ELSA-2025-7497.html
https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq
https://lists.debian.org/debian-lts-announce/2025/04/msg00003.html
https://nvd.nist.gov/vuln/detail/CVE-2025-24813
https://security.netapp.com/advisory/ntap-20250321-0001
https://security.netapp.com/advisory/ntap-20250321-0001/
https://ubuntu.com/security/notices/USN-7525-1
https://ubuntu.com/security/notices/USN-7525-2
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-24813
https://www.cve.org/CVERecord?id=CVE-2025-24813
https://www.vicarius.io/vsociety/posts/cve-2025-24813-detect-apache-tomcat-rce
https://www.vicarius.io/vsociety/posts/cve-2025-24813-mitigate-apache-tomcat-rce
https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-detect-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-24813-tomcat-mitigation-vulnerability
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41293 |
CRITICAL |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/13
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-41293
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/19f17a257797e8d139b33ff9c88d362a273be148
https://github.com/apache/tomcat/commit/1c70480466572c9192ed412ebefcd43fc63137fd
https://github.com/apache/tomcat/commit/2a2476460e823789f530a22207873ea8cd6eff3b
https://github.com/apache/tomcat/commit/3915fd27e6810b14ccd21e3d900bd8faef44d3df
https://github.com/apache/tomcat/commit/57c2b3bfd62792631e1df24cf4237b990a0b36fa
https://github.com/apache/tomcat/commit/c2925554c677da57390f940d856871e18daaacab
https://github.com/apache/tomcat/commit/cf9452443bcbf3b1a4b435ef7d624364f1b65ca3
https://github.com/apache/tomcat/commit/e5cef9618c3f4fd31bd6fb1e83f0f18022280dac
https://github.com/apache/tomcat/commit/f72a6174ab1f0f5a053435f80448b4f6837fe6d7
https://linux.oracle.com/cve/CVE-2026-41293.html
https://linux.oracle.com/errata/ELSA-2026-69259.html
https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r
https://nvd.nist.gov/vuln/detail/CVE-2026-41293
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-41293
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43512 |
CRITICAL |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/8
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-43512
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat/commit/3d4d3fae07a6cd9c2eb193c5491001740ec64448
https://github.com/apache/tomcat/commit/6565a6cb6499e56fe2f34457cec99f9d1c4f39e9
https://github.com/apache/tomcat/commit/a99c355e8199adbfd67c9a1fffbd85b810b196cd
https://linux.oracle.com/cve/CVE-2026-43512.html
https://linux.oracle.com/errata/ELSA-2026-69259.html
https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73
https://nvd.nist.gov/vuln/detail/CVE-2026-43512
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://www.cve.org/CVERecord?id=CVE-2026-43512
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43515 |
CRITICAL |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/11
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-43515
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/276087d9c7abbcecc6c4fb4e4b08cf64780c6e36
https://github.com/apache/tomcat/commit/c621317382682206fb58ab92ebd3e1b6fdd10ce9
https://github.com/apache/tomcat/commit/db919ff9912b4d61d1b702a1342b8bde39270031
https://linux.oracle.com/cve/CVE-2026-43515.html
https://linux.oracle.com/errata/ELSA-2026-69259.html
https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb
https://nvd.nist.gov/vuln/detail/CVE-2026-43515
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://ubuntu.com/security/notices/USN-8551-1
https://www.cve.org/CVERecord?id=CVE-2026-43515
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-65182 |
CRITICAL |
9.0.35 |
11.0.25, 10.1.58, 9.0.121 |
http://www.openwall.com/lists/oss-security/2026/08/26/1
https://access.redhat.com/security/cve/CVE-2026-65182
https://advisory.echohq.com/cve/CVE-2026-65182
https://github.com/apache/tomcat/commit/8bafd79a3b54684e80e9cb1bafd4746aede7d3f5
https://github.com/apache/tomcat/commit/b2c56ec8f20c66773a1a813034ffcdb60841f1cf
https://github.com/apache/tomcat/commit/b79752d2a8578d94743e2a95c50af297f780c0df
https://lists.apache.org/thread/joosxvzc9b49ttj8lj0jw9mqt0ml767m
https://nvd.nist.gov/vuln/detail/CVE-2026-65182
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2026-65182
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-65905 |
CRITICAL |
9.0.35 |
11.0.25, 10.1.58, 9.0.121 |
http://www.openwall.com/lists/oss-security/2026/08/26/4
https://access.redhat.com/security/cve/CVE-2026-65905
https://advisory.echohq.com/cve/CVE-2026-65905
https://github.com/apache/tomcat
https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj
https://nvd.nist.gov/vuln/detail/CVE-2026-65905
https://www.cve.org/CVERecord?id=CVE-2026-65905
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-68525 |
CRITICAL |
9.0.35 |
11.0.25, 10.1.58, 9.0.121 |
http://www.openwall.com/lists/oss-security/2026/08/26/7
https://access.redhat.com/security/cve/CVE-2026-68525
https://advisory.echohq.com/cve/CVE-2026-68525
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/10d048e16034ddf12055e0cede0da05b15c823b8
https://github.com/apache/tomcat/commit/32f0c38526b4e655ff0c17cd97afedefc624fe43
https://github.com/apache/tomcat/commit/58123aa468a20e2a079b7e0c68a4009e2475c098
https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7
https://nvd.nist.gov/vuln/detail/CVE-2026-68525
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2026-68525
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-25122 |
HIGH |
9.0.35 |
10.0.2, 9.0.43, 8.5.63 |
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202103.mbox/%3Cb7626398-5e6d-1639-4e9e-e41b34af84de@apache.org%3E
http://www.openwall.com/lists/oss-security/2021/03/01/1
https://access.redhat.com/security/cve/CVE-2021-25122
https://github.com/apache/tomcat
https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cannounce.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html
https://nvd.nist.gov/vuln/detail/CVE-2021-25122
https://security.gentoo.org/glsa/202208-34
https://security.netapp.com/advisory/ntap-20210409-0002
https://security.netapp.com/advisory/ntap-20210409-0002/
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.2
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.63
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.43
https://ubuntu.com/security/notices/USN-5360-1
https://ubuntu.com/security/notices/USN-6943-1
https://www.cve.org/CVERecord?id=CVE-2021-25122
https://www.debian.org/security/2021/dsa-4891
https://www.openwall.com/lists/oss-security/2021/03/01/1
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-25329 |
HIGH |
9.0.35 |
10.0.2, 9.0.41, 8.5.61, 7.0.108 |
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202103.mbox/%3C811bba77-e74e-9f9b-62ca-5253a09ba84f@apache.org%3E
http://www.openwall.com/lists/oss-security/2021/03/01/2
https://access.redhat.com/security/cve/CVE-2021-25329
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/6d66e99ef85da93e4d2c2a536ca51aa3418bfaf4
https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r732b2ca289dc02df2de820e8775559abd6c207f159e39f559547a085@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cannounce.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf@%3Cusers.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html
https://nvd.nist.gov/vuln/detail/CVE-2021-25329
https://security.gentoo.org/glsa/202208-34
https://security.netapp.com/advisory/ntap-20210409-0002
https://security.netapp.com/advisory/ntap-20210409-0002/
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.2
https://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.108
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.63
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.43
https://ubuntu.com/security/notices/USN-5360-1
https://ubuntu.com/security/notices/USN-6908-1
https://www.cve.org/CVERecord?id=CVE-2021-25329
https://www.debian.org/security/2021/dsa-4891
https://www.openwall.com/lists/oss-security/2021/03/01/2
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2022-42252 |
HIGH |
9.0.35 |
8.5.83, 9.0.68, 10.0.27, 10.1.1 |
https://access.redhat.com/security/cve/CVE-2022-42252
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0d089a15047faf9cb3c82f80f4d28febd4798920
https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77
https://github.com/apache/tomcat/commit/4c7f4fd09d2cc1692112ef70b8ee23a7a037ae77%20%289.0.68%29
https://github.com/apache/tomcat/commit/a1c07906d8dcaf7957e5cc97f5cdbac7d18a205a
https://github.com/apache/tomcat/commit/a1c07906d8dcaf7957e5cc97f5cdbac7d18a205a%20%288.5.83%29
https://github.com/apache/tomcat/commit/c9fe754e5d17e262dfbd3eab2a03ca96ff372dc3
https://lists.apache.org/thread/zzcxzvqfdqn515zfs3dxb7n8gty589sq
https://nvd.nist.gov/vuln/detail/CVE-2022-42252
https://security.gentoo.org/glsa/202305-37
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-6880-1
https://www.cve.org/CVERecord?id=CVE-2022-42252
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-24998 |
HIGH |
9.0.35 |
10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 |
http://www.openwall.com/lists/oss-security/2023/05/22/1
https://access.redhat.com/errata/RHSA-2023:6570
https://access.redhat.com/security/cve/CVE-2023-24998
https://bugzilla.redhat.com/2172298
https://bugzilla.redhat.com/2180856
https://bugzilla.redhat.com/2210321
https://commons.apache.org/proper/commons-fileupload/security-reports.html
https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5
https://errata.almalinux.org/9/ALSA-2023-6570.html
https://github.com/apache/commons-fileupload
https://github.com/apache/commons-fileupload/commit/e20c04990f7420ca917e96a84cec58b13a1b3d17
https://github.com/apache/tomcat/commit/8a2285f13affa961cc65595aad999db5efae45ce
https://github.com/apache/tomcat/commit/9ca96c8c1eba86c0aaa2e6be581ba2a7d4d4ae6e
https://github.com/apache/tomcat/commit/cf77cc545de0488fb89e24294151504a7432df74
https://github.com/apache/tomcat/commit/d53d8e7f77042cc32a3b98f589496a1ef5088e38
https://github.com/search?q=repo%3Aapache%2Ftomcat+util.http+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code
https://linux.oracle.com/cve/CVE-2023-24998.html
https://linux.oracle.com/errata/ELSA-2023-7065.html
https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2025/07/msg00008.html
https://nvd.nist.gov/vuln/detail/CVE-2023-24998
https://security.gentoo.org/glsa/202305-37
https://security.netapp.com/advisory/ntap-20230302-0013
https://security.netapp.com/advisory/ntap-20230302-0013/
https://security.netapp.com/advisory/ntap-20241108-0002
https://security.netapp.com/advisory/ntap-20241108-0002/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2023-24998
https://www.debian.org/security/2023/dsa-5522
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-46589 |
HIGH |
9.0.35 |
11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 |
http://www.openwall.com/lists/oss-security/2023/11/28/2
https://access.redhat.com/errata/RHSA-2024:1134
https://access.redhat.com/security/cve/CVE-2023-46589
https://bugzilla.redhat.com/2252050
https://bugzilla.redhat.com/show_bug.cgi?id=2252050
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46589
https://errata.almalinux.org/9/ALSA-2024-1134.html
https://errata.rockylinux.org/RLSA-2024:0539
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0a11905b67fdff58f4efa77fb099ca9967a709b3%20%288.5.64%29
https://github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041b
https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd
https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd%20%289.0.83%29
https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642
https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642%20%288.5.96%29
https://github.com/apache/tomcat/commit/abdf1d8e8a8f12d1956f2828bf22b9846a6dcdef%20%288.5.96%29
https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08
https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08%20%2810.1.16%29
https://github.com/apache/tomcat/commit/bcacd783e2593ae9b2c07a561bd5f95a145a7761%20%288.5.40%29
https://linux.oracle.com/cve/CVE-2023-46589.html
https://linux.oracle.com/errata/ELSA-2024-1134.html
https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr
https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2023-46589
https://security.netapp.com/advisory/ntap-20231214-0009
https://security.netapp.com/advisory/ntap-20231214-0009/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-7032-1
https://www.cve.org/CVERecord?id=CVE-2023-46589
https://www.openwall.com/lists/oss-security/2023/11/28/2
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-34750 |
HIGH |
9.0.35 |
11.0.0-M21, 10.1.25, 9.0.90 |
https://access.redhat.com/errata/RHSA-2024:5693
https://access.redhat.com/security/cve/CVE-2024-34750
https://bugzilla.redhat.com/2295651
https://bugzilla.redhat.com/show_bug.cgi?id=2295651
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34750
https://errata.almalinux.org/9/ALSA-2024-5693.html
https://errata.rockylinux.org/RLSA-2024:5693
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/2344a4c0d03e307ba6b8ab6dc8b894cc8bac63f2
https://github.com/apache/tomcat/commit/2afae300c9ac9c0e516e2e9de580847d925365c3
https://github.com/apache/tomcat/commit/9fec9a82887853402833a80b584e3762c7423f5f
https://linux.oracle.com/cve/CVE-2024-34750.html
https://linux.oracle.com/errata/ELSA-2024-5694.html
https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2024-34750
https://security.netapp.com/advisory/ntap-20240816-0004
https://security.netapp.com/advisory/ntap-20240816-0004/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2024-34750
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-38286 |
HIGH |
9.0.35 |
11.0.0-M21, 10.1.25, 9.0.90 |
http://www.openwall.com/lists/oss-security/2024/09/23/2
https://access.redhat.com/security/cve/CVE-2024-38286
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/3197862639732e16ec1164557bcd289ebc116c93
https://github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543
https://github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543%20%2810.1.25%29
https://github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13
https://github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13%20%289.0.90%29
https://lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s
https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2024-38286
https://security.netapp.com/advisory/ntap-20241101-0010
https://security.netapp.com/advisory/ntap-20241101-0010/
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2024-38286
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-50379 |
HIGH |
9.0.35 |
11.0.2, 10.1.34, 9.0.98 |
http://www.openwall.com/lists/oss-security/2024/12/17/4
http://www.openwall.com/lists/oss-security/2024/12/18/2
https://access.redhat.com/errata/RHSA-2025:3645
https://access.redhat.com/security/cve/CVE-2024-50379
https://bugzilla.redhat.com/2332817
https://bugzilla.redhat.com/2351129
https://bugzilla.redhat.com/show_bug.cgi?id=2332817
https://bugzilla.redhat.com/show_bug.cgi?id=2351129
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-50379
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-24813
https://errata.almalinux.org/9/ALSA-2025-3645.html
https://errata.rockylinux.org/RLSA-2025:3645
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/05ddeeaa54df1e2dc427d0164bedd6b79f78d81f
https://github.com/apache/tomcat/commit/05ddeeaa54df1e2dc427d0164bedd6b79f78d81f%20%2810.1.34%29
https://github.com/apache/tomcat/commit/43b507ebac9d268b1ea3d908e296cc6e46795c00
https://github.com/apache/tomcat/commit/43b507ebac9d268b1ea3d908e296cc6e46795c00%20%289.0.98%29
https://github.com/apache/tomcat/commit/631500b0c9b2a2a2abb707e3de2e10a5936e5d41
https://github.com/apache/tomcat/commit/631500b0c9b2a2a2abb707e3de2e10a5936e5d41%20%289.0.98%29
https://github.com/apache/tomcat/commit/684247ae85fa633b9197b32391de59fc54703842
https://github.com/apache/tomcat/commit/8554f6b1722b33a2ce8b0a3fad37825f3a75f2d2
https://github.com/apache/tomcat/commit/8554f6b1722b33a2ce8b0a3fad37825f3a75f2d2%20%2810.1.34%29
https://github.com/apache/tomcat/commit/cc7a98b57c6dc1df21979fcff94a36e068f4456c
https://linux.oracle.com/cve/CVE-2024-50379.html
https://linux.oracle.com/errata/ELSA-2025-3683.html
https://lists.apache.org/thread/y6lj6q1xnp822g6ro70tn19sgtjmr80r
https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2024-50379
https://security.netapp.com/advisory/ntap-20250103-0003
https://security.netapp.com/advisory/ntap-20250103-0003/
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.34
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.2
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.98
https://ubuntu.com/security/notices/USN-7705-1
https://www.cve.org/CVERecord?id=CVE-2024-50379
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-56337 |
HIGH |
9.0.35 |
11.0.2, 10.1.34, 9.0.98 |
https://access.redhat.com/errata/RHSA-2025:11335
https://access.redhat.com/security/cve/CVE-2024-56337
https://bugzilla.redhat.com/2333521
https://bugzilla.redhat.com/2362783
https://bugzilla.redhat.com/show_bug.cgi?id=2333521
https://bugzilla.redhat.com/show_bug.cgi?id=2362783
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-56337
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31650
https://errata.almalinux.org/9/ALSA-2025-11335.html
https://errata.rockylinux.org/RLSA-2025:11335
https://github.com/apache/tomcat
https://linux.oracle.com/cve/CVE-2024-56337.html
https://linux.oracle.com/errata/ELSA-2025-11335.html
https://lists.apache.org/thread/b2b9qrgjrz1kvo4ym8y2wkfdvwoq6qbp
https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2024-56337
https://security.netapp.com/advisory/ntap-20250103-0002
https://security.netapp.com/advisory/ntap-20250103-0002/
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.34
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.2
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.98
https://www.cve.org/CVERecord?id=CVE-2024-50379
https://www.cve.org/CVERecord?id=CVE-2024-56337
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-48988 |
HIGH |
9.0.35 |
11.0.8, 10.1.42, 9.0.106 |
http://www.openwall.com/lists/oss-security/2025/06/16/1
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-48988
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/2b0ab14fb55d4edc896e5f1817f2ab76f714ae5e
https://github.com/apache/tomcat/commit/2b0ab14fb55d4edc896e5f1817f2ab76f714ae5e%20%2811.0.8%29
https://github.com/apache/tomcat/commit/cdde8e655bc1c5c60a07efd216251d77c52fd7f6
https://github.com/apache/tomcat/commit/cdde8e655bc1c5c60a07efd216251d77c52fd7f6%20%2810.1.42%29
https://github.com/apache/tomcat/commit/ee8042ffce4cb9324dfd79efda5984f37bbb6910
https://github.com/apache/tomcat/commit/ee8042ffce4cb9324dfd79efda5984f37bbb6910%20%289.0.106%29
https://linux.oracle.com/cve/CVE-2025-48988.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/nzkqsok8t42qofgqfmck536mtyzygp18
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-48988
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-48988
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-48989 |
HIGH |
9.0.35 |
11.0.10, 10.1.44, 9.0.108 |
http://www.openwall.com/lists/oss-security/2025/08/13/2
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-48989
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255
https://github.com/apache/tomcat/commit/73c04a10395774bda71a0b37802cf983662ce255%20%2810.1.44%29
https://github.com/apache/tomcat/commit/f362c8eb3b8ec5b7f312f7f5610731c0fb299a06
https://github.com/apache/tomcat/commit/f362c8eb3b8ec5b7f312f7f5610731c0fb299a06%20%2811.0.10%29
https://github.com/apache/tomcat/commit/f36b8a4eea4ce8a0bc035079e1d259d29f5eb7bf
https://github.com/apache/tomcat/commit/f36b8a4eea4ce8a0bc035079e1d259d29f5eb7bf%20%289.0.108%29
https://kb.cert.org/vuls/id/767506
https://linux.oracle.com/cve/CVE-2025-48989.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf
https://nvd.nist.gov/vuln/detail/CVE-2025-48989
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.44
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-48989
https://www.kb.cert.org/vuls/id/767506
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-52520 |
HIGH |
9.0.35 |
11.0.9, 10.1.43, 9.0.107 |
http://www.openwall.com/lists/oss-security/2025/07/10/12
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-52520
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/927d66fbc294cb65242102b817a45fd80834e040
https://github.com/apache/tomcat/commit/927d66fbc294cb65242102b817a45fd80834e040%20%289.0.107%29
https://github.com/apache/tomcat/commit/a51e4bedccfafd35b7cdd0ee3e22267dee9f90db
https://github.com/apache/tomcat/commit/a51e4bedccfafd35b7cdd0ee3e22267dee9f90db%20%2811.0.9%29
https://github.com/apache/tomcat/commit/fc42bbccb9041fafd194fbfdf3eab1d44cb5c45c
https://github.com/apache/tomcat/commit/fc42bbccb9041fafd194fbfdf3eab1d44cb5c45c%20%2810.1.43%29
https://linux.oracle.com/cve/CVE-2025-52520.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/trqq01bbxw6c92zx69kx2mw2qgmfy0o5
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52520
https://www.cve.org/CVERecord?id=CVE-2025-52520
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-53506 |
HIGH |
9.0.35 |
9.0.107, 10.1.43, 11.0.9 |
http://www.openwall.com/lists/oss-security/2025/07/10/13
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-53506
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/2aa6261276ebe50b99276953591e3a2be7898bdb
https://github.com/apache/tomcat/commit/2aa6261276ebe50b99276953591e3a2be7898bdb%20%2810.1.43%29
https://github.com/apache/tomcat/commit/434772930f362145516dd60681134e7f0cf8115b
https://github.com/apache/tomcat/commit/434772930f362145516dd60681134e7f0cf8115b%20%289.0.107%29
https://github.com/apache/tomcat/commit/be8f330f83ceddaf3baeed57522e571572b6b99b
https://github.com/apache/tomcat/commit/be8f330f83ceddaf3baeed57522e571572b6b99b%20%2811.0.9%29
https://linux.oracle.com/cve/CVE-2025-53506.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/p09775q0rd185m6zz98krg0fp45j8kr0
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-53506
https://www.cve.org/CVERecord?id=CVE-2025-53506
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-55752 |
HIGH |
9.0.35 |
11.0.11, 10.1.45, 9.0.109 |
http://www.openwall.com/lists/oss-security/2025/10/27/4
https://access.redhat.com/errata/RHSA-2025:23049
https://access.redhat.com/security/cve/CVE-2025-55752
https://bugzilla.redhat.com/2362782
https://bugzilla.redhat.com/2406591
https://bugzilla.redhat.com/show_bug.cgi?id=2362782
https://bugzilla.redhat.com/show_bug.cgi?id=2406591
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-31651
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55752
https://errata.almalinux.org/9/ALSA-2025-23049.html
https://errata.rockylinux.org/RLSA-2025:23049
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/130d36d8492ef9e4eb22952c17c92423cb35fd06
https://github.com/apache/tomcat/commit/130d36d8492ef9e4eb22952c17c92423cb35fd06%20%2810.1.45%29
https://github.com/apache/tomcat/commit/b5042622b8b78340ae65403c55dcb9c7416924df
https://github.com/apache/tomcat/commit/b5042622b8b78340ae65403c55dcb9c7416924df%20%289.0.109%29
https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a
https://github.com/apache/tomcat/commit/fec06c610ed7466b401e29cc567a58aee5ed826a%20%2811.0.11%29
https://linux.oracle.com/cve/CVE-2025-55752.html
https://linux.oracle.com/errata/ELSA-2025-23052.html
https://lists.apache.org/thread/n05kjcwyj1s45ovs8ll1qrrojhfb1tog
https://nvd.nist.gov/vuln/detail/CVE-2025-55752
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.45
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.11
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.109
https://www.cve.org/CVERecord?id=CVE-2025-55752
https://www.vicarius.io/vsociety/posts/cve-2025-55752-detect-apache-tomcat-vulnerability
https://www.vicarius.io/vsociety/posts/cve-2025-55752-mitigate-apache-tomcat-vulnerability
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-24880 |
HIGH |
9.0.35 |
9.0.116, 10.1.52, 11.0.20 |
http://www.openwall.com/lists/oss-security/2026/04/09/20
https://access.redhat.com/errata/RHSA-2026:26323
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2026-24880
https://bugzilla.redhat.com/2440426
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-26323.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a
https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb
https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5
https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c
https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522
https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552
https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn
https://nvd.nist.gov/vuln/detail/CVE-2026-24880
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116
https://www.cve.org/CVERecord?id=CVE-2026-24880
https://www.herodevs.com/vulnerability-directory/cve-2026-24880
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-34487 |
HIGH |
9.0.35 |
9.0.117, 10.1.54, 11.0.21 |
http://www.openwall.com/lists/oss-security/2026/04/09/28
https://access.redhat.com/errata/RHSA-2026:26323
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2026-34487
https://bugzilla.redhat.com/2440426
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-26323.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/301bc6efbf72feb14dacfdfa3f50372182736150
https://github.com/apache/tomcat/commit/5eff2a773b8b728083e5195b3183df1b9e12a03d
https://github.com/apache/tomcat/commit/f593292a082e5ef9336a8db2b4b522f7f3e36976
https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h
https://nvd.nist.gov/vuln/detail/CVE-2026-34487
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2026-34487
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-41284 |
HIGH |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/12
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-41284
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/17dacd9aa48628da2eba37a9ab743c0b6c71685c
https://github.com/apache/tomcat/commit/a96fffd18487a29c0a30d36f00cb2b2d91f6d42c
https://github.com/apache/tomcat/commit/b3d1c1c239142e806be0b7329d304b94a58913ed
https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc
https://nvd.nist.gov/vuln/detail/CVE-2026-41284
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-41284
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-42498 |
HIGH |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/14
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-42498
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/169d725788ea6aec217ecac70fe4161c837ba423
https://github.com/apache/tomcat/commit/6cbe274592ef2d11607b5b188e1df649de52f8d5
https://github.com/apache/tomcat/commit/b7b173694d588ddcfa432f079baf763cbbbaa5c4
https://linux.oracle.com/cve/CVE-2026-42498.html
https://linux.oracle.com/errata/ELSA-2026-69259.html
https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb
https://nvd.nist.gov/vuln/detail/CVE-2026-42498
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8417-1
https://ubuntu.com/security/notices/USN-8450-1
https://www.cve.org/CVERecord?id=CVE-2026-42498
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43513 |
HIGH |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/9
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-43513
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/4a90d3fa93988c447cd5bb7482f76ff70d7f15c2
https://github.com/apache/tomcat/commit/6dd75beb55bd42fc5f78e929596b25018cd17717
https://github.com/apache/tomcat/commit/83f3e51df7b87f5f6e626951c575ded1a512e8ef
https://linux.oracle.com/cve/CVE-2026-43513.html
https://linux.oracle.com/errata/ELSA-2026-69259.html
https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp
https://nvd.nist.gov/vuln/detail/CVE-2026-43513
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-8383-1
https://ubuntu.com/security/notices/USN-8417-1
https://www.cve.org/CVERecord?id=CVE-2026-43513
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2021-24122 |
MEDIUM |
9.0.35 |
10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 |
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202101.mbox/%3Cf3765f21-969d-7f21-e34a-efc106175373@apache.org%3E
http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.107
http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.60
http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.40
http://www.openwall.com/lists/oss-security/2021/01/14/1
https://access.redhat.com/security/cve/CVE-2021-24122
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/7f004ac4531c45f9a2a2d1470561fe135cf27bc2
https://github.com/apache/tomcat/commit/800b03140e640f8892f27021e681645e8e320177
https://github.com/apache/tomcat/commit/920dddbdb981f92e8d5872a4bb126a10af5ca8a9
https://github.com/apache/tomcat/commit/935fc5582dc25ae10bab6f9d5629ff8d996cb533
https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.apache.org%3E
https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52@%3Cannounce.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r7382e1e35b9bc7c8f320b90ad77e74c13172d08034e20c18000fe710@%3Cdev.tomee.apache.org%3E
https://lists.apache.org/thread.html/r776c64337495bf28b7d5597268114a888e3fad6045c40a0da0c66d4d@%3Cdev.tomee.apache.org%3E
https://lists.apache.org/thread.html/r7e0bb9ea415724550e2b325e143b23e269579e54d66fcd7754bd0c20@%3Cdev.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rb32a73b7cb919d4f44a2596b6b951274c0004fc8b0e393d6829a45f9@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937@%3Cdev.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html
https://nvd.nist.gov/vuln/detail/CVE-2021-24122
https://security.netapp.com/advisory/ntap-20210212-0008
https://security.netapp.com/advisory/ntap-20210212-0008/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-7.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2021-24122
https://www.oracle.com//security-alerts/cpujul2021.html
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-41080 |
MEDIUM |
9.0.35 |
8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 |
https://access.redhat.com/errata/RHSA-2024:0474
https://access.redhat.com/security/cve/CVE-2023-41080
https://bugzilla.redhat.com/2235370
https://bugzilla.redhat.com/2243749
https://bugzilla.redhat.com/2243751
https://bugzilla.redhat.com/2243752
https://errata.almalinux.org/9/ALSA-2024-0474.html
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/4998ad745b67edeadefe541c94ed029b53933d3b
https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b
https://github.com/apache/tomcat/commit/77c0ce2d169efa248b64b992e547aad549ec906b%20%289.0.80%29
https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27
https://github.com/apache/tomcat/commit/bb4624a9f3e69d495182ebfa68d7983076407a27%20%2810.1.13%29
https://github.com/apache/tomcat/commit/e3703c9abb8fe0d5602f6ba8a8f11d4b6940815a
https://linux.oracle.com/cve/CVE-2023-41080.html
https://linux.oracle.com/errata/ELSA-2024-0474.html
https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://nvd.nist.gov/vuln/detail/CVE-2023-41080
https://security.netapp.com/advisory/ntap-20230921-0006
https://security.netapp.com/advisory/ntap-20230921-0006/
https://ubuntu.com/security/notices/USN-7106-1
https://www.cve.org/CVERecord?id=CVE-2023-41080
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-42795 |
MEDIUM |
9.0.35 |
10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 |
http://www.openwall.com/lists/oss-security/2023/10/10/9
https://access.redhat.com/errata/RHSA-2024:0474
https://access.redhat.com/security/cve/CVE-2023-42795
https://bugzilla.redhat.com/2235370
https://bugzilla.redhat.com/2243749
https://bugzilla.redhat.com/2243751
https://bugzilla.redhat.com/2243752
https://errata.almalinux.org/9/ALSA-2024-0474.html
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/30f8063d7a9b4c43ae4722f5e382a76af1d7a6bf
https://github.com/apache/tomcat/commit/44d05d75d696ca10ce251e4e370511e38f20ae75
https://github.com/apache/tomcat/commit/9375d67106f8df9eb9d7b360b2bef052fe67d3d4
https://github.com/apache/tomcat/commit/d6db22e411307c97ddf78315c15d5889356eca38
https://linux.oracle.com/cve/CVE-2023-42795.html
https://linux.oracle.com/errata/ELSA-2024-0474.html
https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://nvd.nist.gov/vuln/detail/CVE-2023-42795
https://security.netapp.com/advisory/ntap-20231103-0007
https://security.netapp.com/advisory/ntap-20231103-0007/
https://ubuntu.com/security/notices/USN-7106-1
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2023-42795
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
https://www.openwall.com/lists/oss-security/2023/10/10/9
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-44487 |
MEDIUM |
9.0.35 |
11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 |
http://www.openwall.com/lists/oss-security/2023/10/10/6
http://www.openwall.com/lists/oss-security/2023/10/10/7
http://www.openwall.com/lists/oss-security/2023/10/13/4
http://www.openwall.com/lists/oss-security/2023/10/13/9
http://www.openwall.com/lists/oss-security/2023/10/18/4
http://www.openwall.com/lists/oss-security/2023/10/18/8
http://www.openwall.com/lists/oss-security/2023/10/19/6
http://www.openwall.com/lists/oss-security/2023/10/20/8
http://www.openwall.com/lists/oss-security/2025/08/13/6
https://access.redhat.com/errata/RHSA-2023:5838
https://access.redhat.com/errata/RHSA-2023:6746
https://access.redhat.com/security/cve/CVE-2023-44487
https://access.redhat.com/security/cve/cve-2023-44487
https://akka.io/security/akka-http-cve-2023-44487.html
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size
https://arstechnica.com/security/2023/10/how-ddosers-used-the-http-2-protocol-to-deliver-attacks-of-unprecedented-size/
https://aws.amazon.com/security/security-bulletins/AWS-2023-011
https://aws.amazon.com/security/security-bulletins/AWS-2023-011/
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack
https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack
https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty
https://blog.litespeedtech.com/2023/10/11/rapid-reset-http-2-vulnerablilty/
https://blog.powerdns.com/2024/02/16/powerdns-dnsdist-1.9.0-released
https://blog.qualys.com/vulnerabilities-threat-research/2023/10/10/cve-2023-44487-http-2-rapid-reset-attack
https://blog.vespa.ai/cve-2023-44487
https://blog.vespa.ai/cve-2023-44487/
https://bugzilla.proxmox.com/show_bug.cgi?id=4988
https://bugzilla.redhat.com/2242803
https://bugzilla.redhat.com/show_bug.cgi?id=2242803
https://bugzilla.suse.com/show_bug.cgi?id=1216123
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
https://cert-portal.siemens.com/productcert/html/ssa-341067.html
https://cert-portal.siemens.com/productcert/html/ssa-784301.html
https://cert-portal.siemens.com/productcert/html/ssa-832273.html
https://cert-portal.siemens.com/productcert/html/ssa-915275.html
https://cgit.freebsd.org/ports/commit/?id=c64c329c2c1752f46b73e3e6ce9f4329be6629f9
https://chaos.social/@icing/111210915918780532
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps
https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
https://community.traefik.io/t/is-traefik-vulnerable-to-cve-2023-44487/20125
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-44487
https://devblogs.microsoft.com/dotnet/october-2023-updates/
https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715
https://edg.io/lp/blog/resets-leaks-ddos-and-the-tale-of-a-hidden-cve
https://errata.almalinux.org/9/ALSA-2023-6746.html
https://errata.rockylinux.org/RLSA-2023:5838
https://forums.swift.org/t/swift-nio-http2-security-update-cve-2023-44487-http-2-dos/67764
https://gist.github.com/adulau/7c2bfb8e9cdbe4b35a5e131c66a0c088
https://github.com/Azure/AKS/issues/3947
https://github.com/Kong/kong/discussions/11741
https://github.com/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/advisories/GHSA-vx74-f528-fxqg
https://github.com/advisories/GHSA-xpw8-rcwv-8f8p
https://github.com/akka/akka-http/issues/4323
https://github.com/akka/akka-http/pull/4324
https://github.com/akka/akka-http/pull/4325
https://github.com/alibaba/tengine/issues/1872
https://github.com/apache/apisix/issues/10320
https://github.com/apache/httpd-site/pull/10
https://github.com/apache/httpd/blob/afcdbeebbff4b0c50ea26cdd16e178c0d1f24152/modules/http2/h2_mplx.c#L1101-L1113
https://github.com/apache/tomcat/commit/944332bb15bd2f3bf76ec2caeb1ff0a58a3bc628
https://github.com/apache/tomcat/tree/main/java/org/apache/coyote/http2
https://github.com/apache/trafficserver/pull/10564
https://github.com/apple/swift-nio-http2
https://github.com/apple/swift-nio-http2/security/advisories/GHSA-qppj-fm5r-hxr3
https://github.com/arkrwn/PoC/tree/main/CVE-2023-44487
https://github.com/bcdannyboy/CVE-2023-44487
https://github.com/caddyserver/caddy/issues/5877
https://github.com/caddyserver/caddy/releases/tag/v2.7.5
https://github.com/dotnet/announcements/issues/277
https://github.com/dotnet/core/blob/e4613450ea0da7fd2fc6b61dfb2c1c1dec1ce9ec/release-notes/6.0/6.0.23/6.0.23.md?plain=1#L73
https://github.com/eclipse/jetty.project/issues/10679
https://github.com/envoyproxy/envoy/pull/30055
https://github.com/envoyproxy/envoy/security/advisories/GHSA-jhv4-f7mr-xx76
https://github.com/etcd-io/etcd/issues/16740
https://github.com/facebook/proxygen/pull/466
https://github.com/golang/go/issues/63417
https://github.com/grpc/grpc-go/pull/6703
https://github.com/grpc/grpc-go/releases
https://github.com/grpc/grpc/releases/tag/v1.59.2
https://github.com/h2o/h2o/pull/3291
https://github.com/h2o/h2o/security/advisories/GHSA-2m7v-gc89-fjqf
https://github.com/haproxy/haproxy/issues/2312
https://github.com/hyperium/hyper/issues/3337
https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244
https://github.com/junkurihara/rust-rpxy/issues/97
https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1
https://github.com/kazu-yamamoto/http2/issues/93
https://github.com/kubernetes/ingress-nginx/blob/4b5c5efe2508dc915a48c54de7f23912ff2ec695/changelog/controller-1.9.3.md?plain=1#L15
https://github.com/kubernetes/kubernetes/pull/121120
https://github.com/line/armeria/pull/5232
https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632
https://github.com/micrictor/http2-rst-stream
https://github.com/microsoft/CBL-Mariner/pull/6381
https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61
https://github.com/nghttp2/nghttp2/pull/1961
https://github.com/nghttp2/nghttp2/releases/tag/v1.57.0
https://github.com/ninenines/cowboy/issues/1615
https://github.com/nodejs/node/pull/50121
https://github.com/openresty/openresty/issues/930
https://github.com/opensearch-project/data-prepper/issues/3474
https://github.com/oqtane/oqtane.framework/discussions/3367
https://github.com/projectcontour/contour/pull/5826
https://github.com/tempesta-tech/tempesta/issues/1986
https://github.com/varnishcache/varnish-cache/issues/3996
https://go.dev/cl/534215
https://go.dev/cl/534235
https://go.dev/issue/63417
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://istio.io/latest/news/security/istio-security-2023-004
https://istio.io/latest/news/security/istio-security-2023-004/
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487
https://linkerd.io/2023/10/12/linkerd-cve-2023-44487/
https://linux.oracle.com/cve/CVE-2023-44487.html
https://linux.oracle.com/errata/ELSA-2024-1444.html
https://lists.apache.org/thread/5py8h42mxfsn8l1wy6o41xwhsjlsd87q
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00023.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00024.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html
https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00001.html
https://lists.debian.org/debian-lts-announce/2023/11/msg00012.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2MBEPPC36UBVOZZNAXFHKLFGSLCMN5LI/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WE2I52RHNNU42PX6NZ2RBUHSFFJ2LVZX/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLPRQ5TWUQQXYWBJM7ECYDAIL2YVKIUH/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XFOIBB4YFICHDM7IBOP7PWXW3FX4HLL2/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZB43REMKRQR62NJEI7I5NQ4FSXNLBKRT/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4/
https://lists.w3.org/Archives/Public/ietf-http-wg/2023OctDec/0025.html
https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html
https://mailman.powerdns.com/pipermail/dnsdist/2023-October/001409.html
https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2
https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2/
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487
https://my.f5.com/manage/s/article/K000137106
https://netty.io/news/2023/10/10/4-1-100-Final.html
https://news.ycombinator.com/item?id=37830987
https://news.ycombinator.com/item?id=37830998
https://news.ycombinator.com/item?id=37831062
https://news.ycombinator.com/item?id=37837043
https://nodejs.org/en/blog/vulnerability/october-2023-security-releases
https://nvd.nist.gov/vuln/detail/CVE-2023-44487
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response
https://openssf.org/blog/2023/10/10/http-2-rapid-reset-vulnerability-highlights-need-for-rapid-response/
https://pkg.go.dev/vuln/GO-2023-2102
https://seanmonstar.com/post/730794151136935936/hyper-http2-rapid-reset-unaffected
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http2-reset-d8Kf32vZ
https://security.gentoo.org/glsa/202311-09
https://security.netapp.com/advisory/ntap-20231016-0001
https://security.netapp.com/advisory/ntap-20231016-0001/
https://security.netapp.com/advisory/ntap-20240426-0007
https://security.netapp.com/advisory/ntap-20240426-0007/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://security.netapp.com/advisory/ntap-20240621-0007
https://security.netapp.com/advisory/ntap-20240621-0007/
https://security.paloaltonetworks.com/CVE-2023-44487
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.14
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.0-M12
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.94
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81
https://ubuntu.com/security/CVE-2023-44487
https://ubuntu.com/security/notices/USN-6427-1
https://ubuntu.com/security/notices/USN-6427-2
https://ubuntu.com/security/notices/USN-6438-1
https://ubuntu.com/security/notices/USN-6505-1
https://ubuntu.com/security/notices/USN-6574-1
https://ubuntu.com/security/notices/USN-6754-1
https://ubuntu.com/security/notices/USN-6994-1
https://ubuntu.com/security/notices/USN-7067-1
https://ubuntu.com/security/notices/USN-7410-1
https://ubuntu.com/security/notices/USN-7469-1
https://ubuntu.com/security/notices/USN-7469-2
https://ubuntu.com/security/notices/USN-7469-3
https://ubuntu.com/security/notices/USN-7469-4
https://ubuntu.com/security/notices/USN-7892-1
https://varnish-cache.org/releases/rel6.0.12.html#rel6-0-12
https://varnish-cache.org/releases/rel7.3.1.html#rel7-3-1
https://varnish-cache.org/releases/rel7.4.2.html#rel7-4-2
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records
https://www.bleepingcomputer.com/news/security/new-http-2-rapid-reset-zero-day-attack-breaks-ddos-records/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-44487
https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
https://www.cve.org/CVERecord?id=CVE-2023-44487
https://www.darkreading.com/cloud/internet-wide-zero-day-bug-fuels-largest-ever-ddos-event
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
https://www.debian.org/security/2023/dsa-5540
https://www.debian.org/security/2023/dsa-5549
https://www.debian.org/security/2023/dsa-5558
https://www.debian.org/security/2023/dsa-5570
https://www.eclipse.org/lists/jetty-announce/msg00181.html
https://www.haproxy.com/blog/haproxy-is-not-affected-by-the-http-2-rapid-reset-attack-cve-2023-44487
https://www.mail-archive.com/haproxy@formilux.org/msg44134.html
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487
https://www.netlify.com/blog/netlify-successfully-mitigates-cve-2023-44487/
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products
https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
https://www.openwall.com/lists/oss-security/2023/10/10/6
https://www.phoronix.com/news/HTTP2-Rapid-Reset-Attack
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday
https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday/
https://www.vicarius.io/vsociety/posts/rapid-reset-cve-2023-44487-dos-in-http2-understanding-the-root-cause
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2023-45648 |
MEDIUM |
9.0.35 |
11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 |
http://www.openwall.com/lists/oss-security/2023/10/10/10
https://access.redhat.com/errata/RHSA-2024:0474
https://access.redhat.com/security/cve/CVE-2023-45648
https://bugzilla.redhat.com/2235370
https://bugzilla.redhat.com/2243749
https://bugzilla.redhat.com/2243751
https://bugzilla.redhat.com/2243752
https://errata.almalinux.org/9/ALSA-2024-0474.html
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/59583245639d8c42ae0009f4a4a70464d3ea70a0
https://github.com/apache/tomcat/commit/8ecff306507be8e4fd3adee1ae5de1ea6661a8f4
https://github.com/apache/tomcat/commit/c83fe47725f7ae9ae213568d9039171124fb7ec6
https://github.com/apache/tomcat/commit/eb5c094e5560764cda436362254997511a3ca1f6
https://linux.oracle.com/cve/CVE-2023-45648.html
https://linux.oracle.com/errata/ELSA-2024-0474.html
https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp
https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html
https://nvd.nist.gov/vuln/detail/CVE-2023-45648
https://security.netapp.com/advisory/ntap-20231103-0007
https://security.netapp.com/advisory/ntap-20231103-0007/
https://ubuntu.com/security/notices/USN-7106-1
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2023-45648
https://www.debian.org/security/2023/dsa-5521
https://www.debian.org/security/2023/dsa-5522
https://www.openwall.com/lists/oss-security/2023/10/10/10
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-21733 |
MEDIUM |
9.0.35 |
8.5.64, 9.0.44 |
http://packetstormsecurity.com/files/176951/Apache-Tomcat-8.5.63-9.0.43-HTTP-Response-Smuggling.html
http://www.openwall.com/lists/oss-security/2024/01/19/2
https://access.redhat.com/security/cve/CVE-2024-21733
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/86ccc43940861703c2be96a5f35384407522125a
https://github.com/apache/tomcat/commit/86ccc43940861703c2be96a5f35384407522125a%20%289.0.44%29
https://github.com/apache/tomcat/commit/ce4b154e7b48f66bd98858626347747cd2514311
https://lists.apache.org/thread/h9bjqdd0odj6lhs2o96qgowcc6hb0cfz
https://lists.debian.org/debian-lts-announce/2025/01/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2024-21733
https://security.netapp.com/advisory/ntap-20240216-0005
https://security.netapp.com/advisory/ntap-20240216-0005/
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2024-21733
https://www.openwall.com/lists/oss-security/2024/01/19/2
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2024-24549 |
MEDIUM |
9.0.35 |
8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 |
http://www.openwall.com/lists/oss-security/2024/03/13/3
https://access.redhat.com/errata/RHSA-2024:3307
https://access.redhat.com/security/cve/CVE-2024-24549
https://bugzilla.redhat.com/2269607
https://bugzilla.redhat.com/2269608
https://bugzilla.redhat.com/show_bug.cgi?id=2269607
https://bugzilla.redhat.com/show_bug.cgi?id=2269608
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23672
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24549
https://errata.almalinux.org/9/ALSA-2024-3307.html
https://errata.rockylinux.org/RLSA-2024:3307
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0cac540a882220231ba7a82330483cbd5f6b1f96
https://github.com/apache/tomcat/commit/810f49d5ff6d64b704af85d5b8d0aab9ec3c83f5
https://github.com/apache/tomcat/commit/8e03be9f2698f2da9027d40b9e9c0c9429b74dc0
https://github.com/apache/tomcat/commit/8e03be9f2698f2da9027d40b9e9c0c9429b74dc0%20%289.0.86%29
https://github.com/apache/tomcat/commit/d07c82194edb69d99b438828fe2cbfadbb207843
https://github.com/apache/tomcat/commit/d07c82194edb69d99b438828fe2cbfadbb207843%20%2810.1.19%29
https://linux.oracle.com/cve/CVE-2024-24549.html
https://linux.oracle.com/errata/ELSA-2024-3666.html
https://lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg
https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/
https://nvd.nist.gov/vuln/detail/CVE-2024-24549
https://security.netapp.com/advisory/ntap-20240402-0002
https://security.netapp.com/advisory/ntap-20240402-0002/
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2024-24549
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-49124 |
MEDIUM |
9.0.35 |
11.0.8, 10.1.42, 9.0.106 |
http://www.openwall.com/lists/oss-security/2025/06/16/3
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/28726cc2e63bed68771f5eb0f65a78dc7080571823
https://github.com/apache/tomcat/commit/c56456cda8151c9504dfb7985700824559d769a7
https://github.com/apache/tomcat/commit/e0e07812224d327a321babb554f5a5758d30cc49
https://lists.apache.org/thread/lnow7tt2j6hb9kcpkggx32ht6o90vqzv
https://nvd.nist.gov/vuln/detail/CVE-2025-49124
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.42
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.8
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.106
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-49125 |
MEDIUM |
9.0.35 |
11.0.8, 10.1.42, 9.0.106 |
http://www.openwall.com/lists/oss-security/2025/06/16/2
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-49125
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/7617b9c247bc77ed0444dd69adcd8aa48777886c
https://github.com/apache/tomcat/commit/7617b9c247bc77ed0444dd69adcd8aa48777886c%20%2810.1.42%29
https://github.com/apache/tomcat/commit/9418e3ff9f1f4c006b4661311ae9376c52d162b9
https://github.com/apache/tomcat/commit/9418e3ff9f1f4c006b4661311ae9376c52d162b9%20%289.0.106%29
https://github.com/apache/tomcat/commit/d94bd36fb7eb32e790dae0339bc249069649a637
https://github.com/apache/tomcat/commit/d94bd36fb7eb32e790dae0339bc249069649a637%20%2811.0.8%29
https://linux.oracle.com/cve/CVE-2025-49125.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/m66cytbfrty9k7dc4cg6tl1czhsnbywk
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-49125
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-49125
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-52434 |
MEDIUM |
9.0.35 |
9.0.107 |
http://www.openwall.com/lists/oss-security/2025/07/10/11
https://access.redhat.com/errata/RHSA-2025:14181
https://access.redhat.com/security/cve/CVE-2025-52434
https://bugzilla.redhat.com/2373015
https://bugzilla.redhat.com/2373018
https://bugzilla.redhat.com/2373020
https://bugzilla.redhat.com/2373309
https://bugzilla.redhat.com/2379374
https://bugzilla.redhat.com/2379382
https://bugzilla.redhat.com/2379386
https://bugzilla.redhat.com/show_bug.cgi?id=2373015
https://bugzilla.redhat.com/show_bug.cgi?id=2373018
https://bugzilla.redhat.com/show_bug.cgi?id=2373020
https://bugzilla.redhat.com/show_bug.cgi?id=2373309
https://bugzilla.redhat.com/show_bug.cgi?id=2379374
https://bugzilla.redhat.com/show_bug.cgi?id=2379382
https://bugzilla.redhat.com/show_bug.cgi?id=2379386
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48976
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48988
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-48989
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-49125
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-52520
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-53506
https://errata.almalinux.org/9/ALSA-2025-14181.html
https://errata.rockylinux.org/RLSA-2025:14181
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/8a83c3c42d20762782678932c14005cd3397a018
https://linux.oracle.com/cve/CVE-2025-52434.html
https://linux.oracle.com/errata/ELSA-2025-14181.html
https://lists.apache.org/thread/gxgh65004f25y8519coth6w7vchww030
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-52434
https://www.cve.org/CVERecord?id=CVE-2025-52434
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-55668 |
MEDIUM |
9.0.35 |
11.0.8, 10.1.42, 9.0.106 |
http://www.openwall.com/lists/oss-security/2025/08/13/3
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2025-55668
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2494669
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/8/ALSA-2026-68677.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6
https://github.com/apache/tomcat/commit/8621e4c6ba2c916a41eb34cb0f781171ead33fb6%20%2810.1.42%29
https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21
https://github.com/apache/tomcat/commit/90306d971bb8b8393336d893644124fb2ca11d21%20%2811.0.8%29
https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95
https://github.com/apache/tomcat/commit/9c3673ba04009377cb0c81ccb6cf5078aec1aa95%20%289.0.106%29
https://linux.oracle.com/cve/CVE-2025-55668.html
https://linux.oracle.com/errata/ELSA-2026-18916.html
https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47
https://nvd.nist.gov/vuln/detail/CVE-2025-55668
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-55668
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-66614 |
MEDIUM |
9.0.35 |
11.0.15, 10.1.50, 9.0.113 |
https://access.redhat.com/errata/RHSA-2026:26323
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2025-66614
https://bugzilla.redhat.com/2440426
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-26323.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/152c14885d45f5e0a8b59bd9f93c289cfe20ce30
https://github.com/apache/tomcat/commit/258a591b61f8cf5c22109e21e5a2a38b63454fd2
https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4
https://github.com/apache/tomcat/commit/9276b5e783c8cd5b3fe2bb716306b65004bdd940
https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e
https://github.com/apache/tomcat/commit/a4aa74232e826028cd2f7ba0445caf8a8b52c509
https://lists.apache.org/thread/vw6lxtlh2qbqwpb61wd3sv1flm2nttw7
https://nvd.nist.gov/vuln/detail/CVE-2025-66614
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2025-66614
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-25854 |
MEDIUM |
9.0.35 |
9.0.116, 10.1.53, 11.0.20 |
http://www.openwall.com/lists/oss-security/2026/04/09/21
https://access.redhat.com/errata/RHSA-2026:26323
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2026-25854
https://bugzilla.redhat.com/2440426
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-26323.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0
https://nvd.nist.gov/vuln/detail/CVE-2026-25854
https://www.cve.org/CVERecord?id=CVE-2026-25854
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-46701 |
LOW |
9.0.35 |
9.0.105, 10.1.41, 11.0.7 |
http://www.openwall.com/lists/oss-security/2025/05/29/4
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2025-46701
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2494669
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/8/ALSA-2026-68677.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0f01966eb60015d975525019e12a087f05ebf01a
https://github.com/apache/tomcat/commit/0f01966eb60015d975525019e12a087f05ebf01a%20%2811.0.7%29
https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558
https://github.com/apache/tomcat/commit/238d2aa54b99f91d1111467e2237d2244c64e558%20%2810.1.41%29
https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5
https://github.com/apache/tomcat/commit/2c6800111e7d8d8d5403c07978ea9bff3db5a5a5%20%2810.1.41%29
https://github.com/apache/tomcat/commit/8cb95ff03221067c511b3fa66d4f745bc4b0a605
https://github.com/apache/tomcat/commit/8cb95ff03221067c511b3fa66d4f745bc4b0a605%20%289.0.105%29
https://github.com/apache/tomcat/commit/8df00018a252baa9497615d6420fb6c10466fa74
https://github.com/apache/tomcat/commit/8df00018a252baa9497615d6420fb6c10466fa74%20%289.0.105%29
https://github.com/apache/tomcat/commit/fab7247d2f0e3a29d5daef565f829f383e10e5e2
https://github.com/apache/tomcat/commit/fab7247d2f0e3a29d5daef565f829f383e10e5e2%20%2811.0.7%29
https://linux.oracle.com/cve/CVE-2025-46701.html
https://linux.oracle.com/errata/ELSA-2026-18916.html
https://lists.apache.org/thread/xhqqk9w5q45srcdqhogdk04lhdscv30j
https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html
https://nvd.nist.gov/vuln/detail/CVE-2025-46701
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.41
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.7
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.105
https://ubuntu.com/security/notices/USN-7705-1
https://www.cve.org/CVERecord?id=CVE-2025-46701
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2025-61795 |
LOW |
9.0.35 |
11.0.12, 10.1.47, 9.0.110 |
http://www.openwall.com/lists/oss-security/2025/10/27/6
https://access.redhat.com/errata/RHSA-2026:68677
https://access.redhat.com/security/cve/CVE-2025-61795
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2494669
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2326972
https://bugzilla.redhat.com/show_bug.cgi?id=2332815
https://bugzilla.redhat.com/show_bug.cgi?id=2369253
https://bugzilla.redhat.com/show_bug.cgi?id=2388226
https://bugzilla.redhat.com/show_bug.cgi?id=2406588
https://bugzilla.redhat.com/show_bug.cgi?id=2406590
https://bugzilla.redhat.com/show_bug.cgi?id=2440430
https://bugzilla.redhat.com/show_bug.cgi?id=2440437
https://bugzilla.redhat.com/show_bug.cgi?id=2457037
https://bugzilla.redhat.com/show_bug.cgi?id=2457038
https://bugzilla.redhat.com/show_bug.cgi?id=2457039
https://bugzilla.redhat.com/show_bug.cgi?id=2457040
https://bugzilla.redhat.com/show_bug.cgi?id=2457044
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494669
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/8/ALSA-2026-68677.html
https://errata.rockylinux.org/RLSA-2026:68677
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06
https://github.com/apache/tomcat/commit/1cdf5f730ede75a0759492f179ac21ca4ff68e06%20%2811.0.12%29
https://github.com/apache/tomcat/commit/af6e9181620304c0d818121c29c074e1330610d0
https://github.com/apache/tomcat/commit/af6e9181620304c0d818121c29c074e1330610d0%20%2810.1.47%29
https://github.com/apache/tomcat/commit/afa422bd7ca1eef0f507259c682fd876494d9c3b
https://github.com/apache/tomcat/commit/afa422bd7ca1eef0f507259c682fd876494d9c3b%20%289.0.110%29
https://linux.oracle.com/cve/CVE-2025-61795.html
https://linux.oracle.com/errata/ELSA-2025-23050.html
https://lists.apache.org/thread/wm9mx8brmx9g4zpywm06ryrtvd3160pp
https://nvd.nist.gov/vuln/detail/CVE-2025-61795
https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.47
https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.12
https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.110
https://www.cve.org/CVERecord?id=CVE-2025-61795
|
| org.apache.tomcat.embed:tomcat-embed-core |
CVE-2026-43514 |
LOW |
9.0.35 |
9.0.118, 10.1.55, 11.0.22 |
http://www.openwall.com/lists/oss-security/2026/05/12/10
https://access.redhat.com/errata/RHSA-2026:68660
https://access.redhat.com/security/cve/CVE-2026-43514
https://bugzilla.redhat.com/2457025
https://bugzilla.redhat.com/2476511
https://bugzilla.redhat.com/2476513
https://bugzilla.redhat.com/2476516
https://bugzilla.redhat.com/2476519
https://bugzilla.redhat.com/2476520
https://bugzilla.redhat.com/2499917
https://bugzilla.redhat.com/2499931
https://bugzilla.redhat.com/show_bug.cgi?id=2457025
https://bugzilla.redhat.com/show_bug.cgi?id=2476511
https://bugzilla.redhat.com/show_bug.cgi?id=2476512
https://bugzilla.redhat.com/show_bug.cgi?id=2476513
https://bugzilla.redhat.com/show_bug.cgi?id=2476516
https://bugzilla.redhat.com/show_bug.cgi?id=2476518
https://bugzilla.redhat.com/show_bug.cgi?id=2476519
https://bugzilla.redhat.com/show_bug.cgi?id=2476520
https://bugzilla.redhat.com/show_bug.cgi?id=2494668
https://bugzilla.redhat.com/show_bug.cgi?id=2494675
https://bugzilla.redhat.com/show_bug.cgi?id=2494676
https://bugzilla.redhat.com/show_bug.cgi?id=2494678
https://bugzilla.redhat.com/show_bug.cgi?id=2494681
https://bugzilla.redhat.com/show_bug.cgi?id=2494688
https://bugzilla.redhat.com/show_bug.cgi?id=2499917
https://bugzilla.redhat.com/show_bug.cgi?id=2499931
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
https://errata.almalinux.org/9/ALSA-2026-68660.html
https://errata.rockylinux.org/RLSA-2026:68660
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/933dcdbf2515972280002929e7e597dead2e9ffa
https://github.com/apache/tomcat/commit/a102a2a157868ca51d83eaf5a119ccd9976a113e
https://github.com/apache/tomcat/commit/d35d9d23263c8e4af561f615c960c91697ff200e
https://lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1m
https://nvd.nist.gov/vuln/detail/CVE-2026-43514
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-11.html
https://tomcat.apache.org/security-9.html
https://www.cve.org/CVERecord?id=CVE-2026-43514
|
| org.apache.tomcat.embed:tomcat-embed-websocket |
CVE-2020-13935 |
HIGH |
9.0.35 |
7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 |
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
http://mail-archives.apache.org/mod_mbox/tomcat-announce/202007.mbox/%3C39e4200c-6f4e-b85d-fe4b-a9c2bd5fdc3d@apache.org%3E
http://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.0.0-M7
http://tomcat.apache.org/security-7.html#Fixed_in_Apache_Tomcat_7.0.105
http://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.57
http://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37
https://access.redhat.com/security/cve/CVE-2020-13935
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/12d715676038efbf9c728af10163f8277fc019d5
https://github.com/apache/tomcat/commit/1c1c77b0efb667cea80b532440b44cea1dc427c3
https://github.com/apache/tomcat/commit/40fa74c74822711ab878079d0a69f7357926723d
https://github.com/apache/tomcat/commit/4c04982870d6e730c38e21e58fb653b7cf723784
https://github.com/apache/tomcat/commit/f9f75c14678b68633f79030ddf4ff827f014cc84
https://kc.mcafee.com/corporate/index?page=content&id=SB10332
https://linux.oracle.com/cve/CVE-2020-13935.html
https://linux.oracle.com/errata/ELSA-2020-4004.html
https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651@%3Cannounce.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html
https://nvd.nist.gov/vuln/detail/CVE-2020-13935
https://security.netapp.com/advisory/ntap-20200724-0003
https://security.netapp.com/advisory/ntap-20200724-0003/
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-7.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://ubuntu.com/security/notices/USN-4448-1
https://ubuntu.com/security/notices/USN-4596-1
https://usn.ubuntu.com/4448-1
https://usn.ubuntu.com/4448-1/
https://usn.ubuntu.com/4596-1
https://usn.ubuntu.com/4596-1/
https://www.cve.org/CVERecord?id=CVE-2020-13935
https://www.debian.org/security/2020/dsa-4727
https://www.openwall.com/lists/oss-security/2020/07/14/3
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpuoct2020.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.apache.tomcat.embed:tomcat-embed-websocket |
CVE-2024-23672 |
MEDIUM |
9.0.35 |
11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 |
http://www.openwall.com/lists/oss-security/2024/03/13/4
https://access.redhat.com/errata/RHSA-2024:3307
https://access.redhat.com/security/cve/CVE-2024-23672
https://bugzilla.redhat.com/2269607
https://bugzilla.redhat.com/2269608
https://bugzilla.redhat.com/show_bug.cgi?id=2269607
https://bugzilla.redhat.com/show_bug.cgi?id=2269608
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23672
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24549
https://errata.almalinux.org/9/ALSA-2024-3307.html
https://errata.rockylinux.org/RLSA-2024:3307
https://github.com/apache/tomcat
https://github.com/apache/tomcat/commit/0052b374684b613b0c849899b325ebe334ac6501
https://github.com/apache/tomcat/commit/0052b374684b613b0c849899b325ebe334ac6501%20%2810.1.19%29
https://github.com/apache/tomcat/commit/3631adb1342d8bbd8598802a12b63ad02c37d591
https://github.com/apache/tomcat/commit/52d6650e062d880704898d7d8c1b2b7a3efe8068
https://github.com/apache/tomcat/commit/52d6650e062d880704898d7d8c1b2b7a3efe8068%20%289.0.86%29
https://github.com/apache/tomcat/commit/b0e3b1bd78de270d53e319d7cb79eb282aa53cb9
https://linux.oracle.com/cve/CVE-2024-23672.html
https://linux.oracle.com/errata/ELSA-2024-3666.html
https://lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f
https://lists.debian.org/debian-lts-announce/2024/04/msg00001.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/
https://nvd.nist.gov/vuln/detail/CVE-2024-23672
https://security.netapp.com/advisory/ntap-20240402-0002
https://security.netapp.com/advisory/ntap-20240402-0002/
https://ubuntu.com/security/notices/USN-7106-1
https://ubuntu.com/security/notices/USN-7562-1
https://www.cve.org/CVERecord?id=CVE-2024-23672
|
| org.assertj:assertj-core |
CVE-2026-24400 |
HIGH |
3.16.1 |
3.27.7 |
https://access.redhat.com/errata/RHSA-2026:60215
https://access.redhat.com/security/cve/CVE-2026-24400
https://bugzilla.redhat.com/2433116
https://bugzilla.redhat.com/show_bug.cgi?id=2433116
https://cheatsheetseries.owasp.org/cheatsheets/XML_External_Entity_Prevention_Cheat_Sheet.html
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24400
https://errata.almalinux.org/9/ALSA-2026-60215.html
https://errata.rockylinux.org/RLSA-2026:60215
https://github.com/assertj/assertj
https://github.com/assertj/assertj/commit/85ca7eb6609bb179c043b85ae7d290523b1ba79a
https://github.com/assertj/assertj/releases/tag/assertj-build-3.27.7
https://github.com/assertj/assertj/security/advisories/GHSA-rqfh-9r24-8c9r
https://linux.oracle.com/cve/CVE-2026-24400.html
https://linux.oracle.com/errata/ELSA-2026-60215-0.html
https://nvd.nist.gov/vuln/detail/CVE-2026-24400
https://www.cve.org/CVERecord?id=CVE-2026-24400
|
| org.bouncycastle:bcpkix-jdk15on |
CVE-2025-8916 |
MEDIUM |
1.68 |
1.79 |
https://access.redhat.com/security/cve/CVE-2025-8916
https://advisory.echohq.com/cve/CVE-2025-8916
https://cert-portal.siemens.com/productcert/html/ssa-032379.html
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/310b30a4fbf36d13f6cc201ffa7771715641e67e
https://github.com/bcgit/bc-java/commit/ff444a479942d88de64004dc82c3ee32a9e9075a
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%908916
https://nvd.nist.gov/vuln/detail/CVE-2025-8916
https://ubuntu.com/security/notices/USN-8108-1
https://www.cve.org/CVERecord?id=CVE-2025-8916
|
| org.bouncycastle:bcpkix-jdk15on |
CVE-2026-5588 |
MEDIUM |
1.68 |
1.84 |
https://access.redhat.com/errata/RHSA-2026:11720
https://access.redhat.com/errata/RHSA-2026:11721
https://access.redhat.com/errata/RHSA-2026:13631
https://access.redhat.com/errata/RHSA-2026:14272
https://access.redhat.com/errata/RHSA-2026:14276
https://access.redhat.com/errata/RHSA-2026:17668
https://access.redhat.com/errata/RHSA-2026:18054
https://access.redhat.com/errata/RHSA-2026:18055
https://access.redhat.com/errata/RHSA-2026:18059
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53645
https://access.redhat.com/errata/RHSA-2026:53646
https://access.redhat.com/errata/RHSA-2026:60239
https://access.redhat.com/errata/RHSA-2026:60246
https://access.redhat.com/errata/RHSA-2026:60247
https://access.redhat.com/errata/RHSA-2026:60248
https://access.redhat.com/errata/RHSA-2026:60249
https://access.redhat.com/errata/RHSA-2026:60250
https://access.redhat.com/errata/RHSA-2026:60251
https://access.redhat.com/errata/RHSA-2026:60252
https://access.redhat.com/errata/RHSA-2026:60254
https://access.redhat.com/errata/RHSA-2026:60256
https://access.redhat.com/errata/RHSA-2026:60259
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/security/cve/CVE-2026-5588
https://advisory.echohq.com/cve/CVE-2026-5588
https://bugzilla.redhat.com/show_bug.cgi?id=2458634
https://github.com/advisories/GHSA-wg6q-6289-32hp
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/656bae0dbd9b1521f840521ff786e78749fe3057
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%905588
https://nvd.nist.gov/vuln/detail/CVE-2026-5588
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5588.json
https://www.cve.org/CVERecord?id=CVE-2026-5588
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2023-33201 |
MEDIUM |
1.70 |
|
https://access.redhat.com/security/cve/CVE-2023-33201
https://bouncycastle.org
https://bouncycastle.org/releasenotes.html#r1rv74
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/commit/ccf93ca736b89250ff4ce079a5aa56f5cbf0ebbd
https://github.com/bcgit/bc-java/commit/e8c409a8389c815ea3fda5e8b94c92fdfe583bcc
https://github.com/bcgit/bc-java/commits/main/prov/src/main/java/org/bouncycastle/jce/provider/X509LDAPCertStoreSpi.java
https://github.com/bcgit/bc-java/wiki/CVE-2023-33201
https://lists.debian.org/debian-lts-announce/2023/08/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2023-33201
https://security.netapp.com/advisory/ntap-20230824-0008
https://security.netapp.com/advisory/ntap-20230824-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.cve.org/CVERecord?id=CVE-2023-33201
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-29857 |
MEDIUM |
1.70 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-29857
https://github.com/bcgit/bc-csharp/commit/56daa6eac526f165416d17f661422d60de0dfd63
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9029857
https://github.com/bcgit/bc-java/commit/efc498ca4caa340ac2fe11f2efee06c1a294501f
https://github.com/bcgit/bc-java/commit/fee80dd230e7fba132d03a34f1dd1d6aae0d0281
https://github.com/bcgit/bc-java/issues/1635
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9029857
https://nvd.nist.gov/vuln/detail/CVE-2024-29857
https://security.netapp.com/advisory/ntap-20241206-0008
https://security.netapp.com/advisory/ntap-20241206-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-29857
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-30171 |
MEDIUM |
1.70 |
1.78 |
https://access.redhat.com/security/cve/CVE-2024-30171
https://github.com/bcgit/bc-csharp/commit/c984b8bfd8544dfc55dba91a02cbbbb9c580c217
https://github.com/bcgit/bc-csharp/wiki/CVE%E2%80%902024%E2%80%9030171
https://github.com/bcgit/bc-java/commit/d7d5e735abd64bf0f413f54fd9e495fc02400fb0
https://github.com/bcgit/bc-java/commit/e0569dcb1dea9d421d84fc4c5c5688fe101afa2d
https://github.com/bcgit/bc-java/issues/1528
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9030171
https://nvd.nist.gov/vuln/detail/CVE-2024-30171
https://people.redhat.com/~hkario/marvin/
https://security.netapp.com/advisory/ntap-20240614-0008
https://security.netapp.com/advisory/ntap-20240614-0008/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-30171
|
| org.bouncycastle:bcprov-jdk15on |
CVE-2024-34447 |
MEDIUM |
1.70 |
1.78 |
http://security.netapp.com/advisory/ntap-20240614-0007
https://access.redhat.com/security/cve/CVE-2024-34447
https://github.com/bcgit/bc-java
https://github.com/bcgit/bc-java/issues/1656
https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902024%E2%80%9034447
https://nvd.nist.gov/vuln/detail/CVE-2024-34447
https://security.netapp.com/advisory/ntap-20240614-0007/
https://ubuntu.com/security/notices/USN-8108-1
https://www.bouncycastle.org/latest_releases.html
https://www.cve.org/CVERecord?id=CVE-2024-34447
|
| org.codehaus.jettison:jettison |
CVE-2022-40150 |
HIGH |
1.2 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-40150
https://advisory.echohq.com/cve/CVE-2022-40150
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46549
https://github.com/advisories/GHSA-x27m-9w8j-5vcw
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/45
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40150
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-40150
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2022-45685 |
HIGH |
1.2 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-45685
https://advisory.echohq.com/cve/CVE-2022-45685
https://github.com/advisories/GHSA-7rf3-mqpx-h7xg
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/54
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-45685
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-45685
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2022-45693 |
HIGH |
1.2 |
1.5.2 |
https://access.redhat.com/security/cve/CVE-2022-45693
https://advisory.echohq.com/cve/CVE-2022-45693
https://github.com/advisories/GHSA-grr4-wv38-f68w
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/52
https://lists.debian.org/debian-lts-announce/2022/12/msg00045.html
https://nvd.nist.gov/vuln/detail/CVE-2022-45693
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-45693
https://www.debian.org/security/2023/dsa-5312
|
| org.codehaus.jettison:jettison |
CVE-2023-1436 |
HIGH |
1.2 |
1.5.4 |
https://access.redhat.com/security/cve/CVE-2023-1436
https://advisory.echohq.com/cve/CVE-2023-1436
https://github.com/advisories/GHSA-q6g2-g7f3-rr83
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/60
https://github.com/jettison-json/jettison/pull/62
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4
https://nvd.nist.gov/vuln/detail/CVE-2023-1436
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
https://ubuntu.com/security/notices/USN-6179-1
https://www.cve.org/CVERecord?id=CVE-2023-1436
|
| org.codehaus.jettison:jettison |
CVE-2022-40149 |
MEDIUM |
1.2 |
1.5.1 |
https://access.redhat.com/security/cve/CVE-2022-40149
https://advisory.echohq.com/cve/CVE-2022-40149
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=46538
https://github.com/advisories/GHSA-56h3-78gp-v83r
https://github.com/jettison-json/jettison
https://github.com/jettison-json/jettison/issues/45
https://github.com/jettison-json/jettison/pull/49/files
https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1
https://lists.debian.org/debian-lts-announce/2022/11/msg00011.html
https://nvd.nist.gov/vuln/detail/CVE-2022-40149
https://ubuntu.com/security/notices/USN-6177-1
https://www.cve.org/CVERecord?id=CVE-2022-40149
https://www.debian.org/security/2023/dsa-5312
|
| org.glassfish:jakarta.el |
CVE-2021-28170 |
MEDIUM |
3.0.3 |
3.0.4 |
https://access.redhat.com/security/cve/CVE-2021-28170
https://github.com/eclipse-ee4j/el-ri
https://github.com/eclipse-ee4j/el-ri/issues/155
https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b
https://nvd.nist.gov/vuln/detail/CVE-2021-28170
https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098
https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368
https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el
https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el/
https://www.cve.org/CVERecord?id=CVE-2021-28170
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.hibernate:hibernate-core |
CVE-2020-25638 |
HIGH |
5.4.15.Final |
5.4.24.Final, 5.3.20.Final |
https://access.redhat.com/security/cve/CVE-2020-25638
https://bugzilla.redhat.com/show_bug.cgi?id=1881353
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/36ebf7d3836e83e99f2a91777b5389e1daf1f2b7
https://github.com/hibernate/hibernate-orm/commit/59fede7acaaa1579b561407aefa582311f7ebe78
https://github.com/hibernate/hibernate-orm/commit/d22bbb5c339c9df7712c3365bb1df97c91b35ec5
https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E
https://lists.apache.org/thread.html/rf2378209c676a28b71f9b604a3b3517c448540b85367160e558ef9df@%3Ccommits.turbine.apache.org%3E
https://lists.debian.org/debian-lts-announce/2021/01/msg00000.html
https://nvd.nist.gov/vuln/detail/CVE-2020-25638
https://ubuntu.com/security/notices/USN-6845-1
https://www.cve.org/CVERecord?id=CVE-2020-25638
https://www.debian.org/security/2021/dsa-4908
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.hibernate:hibernate-core |
CVE-2019-14900 |
MEDIUM |
5.4.15.Final |
5.3.18, 5.4.18, 5.5.0.Beta1 |
https://access.redhat.com/security/cve/CVE-2019-14900
https://bugzilla.redhat.com/show_bug.cgi?id=1666499
https://github.com/hibernate/hibernate-orm
https://github.com/hibernate/hibernate-orm/commit/3f3c1ab50604ab9ba99e25d2016fb85f3ba9dcd4
https://github.com/hibernate/hibernate-orm/commit/646b383f959eff18d58081b1a574f0d777d353da
https://github.com/hibernate/hibernate-orm/commit/e0e22ea256c1906235d6a8e90b79c4ce33d0861f
https://github.com/hibernate/hibernate-orm/commit/eebf01fbf3c2550ee70cdc9c1b02b52e330c8c36
https://lists.apache.org/thread.html/r833c1276e41334fa675848a08daf0c61f39009f9f9a400d9f7006d44@%3Cdev.turbine.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2019-14900
https://security.netapp.com/advisory/ntap-20220210-0020
https://security.netapp.com/advisory/ntap-20220210-0020/
https://www.cve.org/CVERecord?id=CVE-2019-14900
|
| org.keycloak:keycloak-adapter-core |
CVE-2026-1180 |
MEDIUM |
17.0.1 |
|
https://access.redhat.com/errata/RHSA-2026:6477
https://access.redhat.com/errata/RHSA-2026:6478
https://access.redhat.com/security/cve/CVE-2026-1180
https://bugzilla.redhat.com/show_bug.cgi?id=2430781
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/45645
https://nvd.nist.gov/vuln/detail/CVE-2026-1180
https://www.cve.org/CVERecord?id=CVE-2026-1180
|
| org.keycloak:keycloak-core |
CVE-2023-6841 |
HIGH |
17.0.1 |
24.0.0 |
https://access.redhat.com/security/cve/CVE-2023-6841
https://bugzilla.redhat.com/show_bug.cgi?id=2254714
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/32837
https://github.com/keycloak/keycloak/releases/tag/24.0.0
https://nvd.nist.gov/vuln/detail/CVE-2023-6841
https://www.cve.org/CVERecord?id=CVE-2023-6841
|
| org.keycloak:keycloak-core |
CVE-2024-10039 |
HIGH |
17.0.1 |
26.0.6 |
https://access.redhat.com/security/cve/CVE-2024-10039
https://advisory.echohq.com/cve/CVE-2024-10039
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/issues/35217
https://github.com/keycloak/keycloak/security/advisories/GHSA-93ww-43rr-79v3
https://nvd.nist.gov/vuln/detail/CVE-2024-10039
https://www.cve.org/CVERecord?id=CVE-2024-10039
|
| org.keycloak:keycloak-core |
CVE-2023-0091 |
MEDIUM |
17.0.1 |
20.0.3 |
https://access.redhat.com/security/cve/CVE-2023-0091
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg
https://github.com/keycloak/security/issues/27
https://nvd.nist.gov/vuln/detail/CVE-2023-0091
https://www.cve.org/CVERecord?id=CVE-2023-0091
|
| org.keycloak:keycloak-core |
CVE-2023-0105 |
MEDIUM |
17.0.1 |
22.0.1 |
https://access.redhat.com/security/cve/CVE-2023-0105
https://bugzilla.redhat.com/show_bug.cgi?id=2158910
https://github.com/advisories/GHSA-c7xw-p58w-h6fj
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/commit/87a50d3ba790b049e436c9925874f9b418af7988
https://github.com/keycloak/keycloak/security/advisories/GHSA-c7xw-p58w-h6fj
https://nvd.nist.gov/vuln/detail/CVE-2023-0105
https://www.cve.org/CVERecord?id=CVE-2023-0105
|
| org.keycloak:keycloak-core |
CVE-2023-1664 |
MEDIUM |
17.0.1 |
21.1.2 |
https://access.redhat.com/security/cve/CVE-2023-1664
https://bugzilla.redhat.com/show_bug.cgi?id=2182196&comment#0
https://github.com/advisories/GHSA-5cc8-pgp5-7mpm
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-5cc8-pgp5-7mpm
https://nvd.nist.gov/vuln/detail/CVE-2023-1664
https://www.cve.org/CVERecord?id=CVE-2023-1664
|
| org.keycloak:keycloak-core |
CVE-2023-6927 |
MEDIUM |
17.0.1 |
23.0.4 |
https://access.redhat.com/errata/RHSA-2024:0094
https://access.redhat.com/errata/RHSA-2024:0095
https://access.redhat.com/errata/RHSA-2024:0096
https://access.redhat.com/errata/RHSA-2024:0097
https://access.redhat.com/errata/RHSA-2024:0098
https://access.redhat.com/errata/RHSA-2024:0100
https://access.redhat.com/errata/RHSA-2024:0101
https://access.redhat.com/errata/RHSA-2024:0798
https://access.redhat.com/errata/RHSA-2024:0799
https://access.redhat.com/errata/RHSA-2024:0800
https://access.redhat.com/errata/RHSA-2024:0801
https://access.redhat.com/errata/RHSA-2024:0804
https://access.redhat.com/security/cve/CVE-2023-6927
https://bugzilla.redhat.com/show_bug.cgi?id=2255027
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-9vm7-v8wj-3fqw
https://nvd.nist.gov/vuln/detail/CVE-2023-6927
https://www.cve.org/CVERecord?id=CVE-2023-6927
|
| org.keycloak:keycloak-core |
CVE-2024-7260 |
MEDIUM |
17.0.1 |
24.0.7 |
https://access.redhat.com/errata/RHSA-2024:6502
https://access.redhat.com/errata/RHSA-2024:6503
https://access.redhat.com/security/cve/CVE-2024-7260
https://bugzilla.redhat.com/show_bug.cgi?id=2301875
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2024-7260
https://www.cve.org/CVERecord?id=CVE-2024-7260
|
| org.keycloak:keycloak-core |
CVE-2024-7318 |
MEDIUM |
17.0.1 |
24.0.7, 25.0.4 |
https://access.redhat.com/errata/RHSA-2024:6502
https://access.redhat.com/errata/RHSA-2024:6503
https://access.redhat.com/security/cve/CVE-2024-7318
https://bugzilla.redhat.com/show_bug.cgi?id=2301876
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-xmmm-jw76-q7vg
https://nvd.nist.gov/vuln/detail/CVE-2024-7318
https://www.cve.org/CVERecord?id=CVE-2024-7318
|
| org.keycloak:keycloak-core |
GHSA-755v-r4x4-qf7m |
MEDIUM |
17.0.1 |
20.0.0 |
https://github.com/keycloak/keycloak
https://github.com/keycloak/keycloak/security/advisories/GHSA-755v-r4x4-qf7m
|
| org.keycloak:keycloak-core |
CVE-2024-4028 |
LOW |
17.0.1 |
|
https://access.redhat.com/security/cve/CVE-2024-4028
https://advisory.echohq.com/cve/CVE-2024-4028
https://bugzilla.redhat.com/show_bug.cgi?id=2276418
https://github.com/keycloak/keycloak
https://nvd.nist.gov/vuln/detail/CVE-2024-4028
https://www.cve.org/CVERecord?id=CVE-2024-4028
|
| org.postgresql:postgresql |
CVE-2024-1597 |
CRITICAL |
42.2.12 |
42.2.28, 42.3.9, 42.4.4, 42.5.5, 42.6.1, 42.7.2 |
http://www.openwall.com/lists/oss-security/2024/04/02/6
https://access.redhat.com/errata/RHSA-2024:1436
https://access.redhat.com/security/cve/CVE-2024-1597
https://bugzilla.redhat.com/2266523
https://bugzilla.redhat.com/show_bug.cgi?id=2266523
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-1597
https://errata.almalinux.org/9/ALSA-2024-1436.html
https://errata.rockylinux.org/RLSA-2024:1436
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee
https://github.com/pgjdbc/pgjdbc/commit/06abfb78a627277a580d4df825f210e96a4e14ee%20%28REL42.7.2%29
https://github.com/pgjdbc/pgjdbc/commit/1b1d6b53eca90409af0069d5327d4fdf8d40a255%20%28REL42.5.5%29
https://github.com/pgjdbc/pgjdbc/commit/475e3e2af3033c666fc1c0015159b35455118ae5%20%28REL42.5.5%29
https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40
https://github.com/pgjdbc/pgjdbc/commit/93b0fcb2711d9c1e3a2a03134369738a02a58b40%20%28REL42.7.2%29
https://github.com/pgjdbc/pgjdbc/commit/990d63f6be401ab40de5eb303a75924c9e71903c%20%28REL42.2.28%29
https://github.com/pgjdbc/pgjdbc/commit/b9b3777671c8a5cc580e1985f61337d39d47c730%20%28REL42.2.28%29
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56
https://linux.oracle.com/cve/CVE-2024-1597.html
https://linux.oracle.com/errata/ELSA-2024-1436.html
https://lists.debian.org/debian-lts-announce/2024/05/msg00007.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TZQTSMESZD2RJ5XBPSXH3TIQVUW5DIUU/
https://nvd.nist.gov/vuln/detail/CVE-2024-1597
https://security.netapp.com/advisory/ntap-20240419-0008/
https://www.cve.org/CVERecord?id=CVE-2024-1597
https://www.enterprisedb.com/docs/jdbc_connector/latest/01_jdbc_rel_notes/
https://www.enterprisedb.com/docs/security/assessments/cve-2024-1597/
https://www.sonarsource.com/blog/double-dash-double-trouble-a-subtle-sql-injection-flaw/
|
| org.postgresql:postgresql |
CVE-2020-13692 |
HIGH |
42.2.12 |
42.2.13 |
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-13692.json
https://access.redhat.com/security/cve/CVE-2020-13692
https://errata.almalinux.org/8/ALSA-2020-3176.html
https://github.com/pgjdbc/pgjdbc/commit/14b62aca4764d496813f55a43d050b017e01eb65
https://jdbc.postgresql.org/documentation/changelog.html#version_42.2.13
https://linux.oracle.com/cve/CVE-2020-13692.html
https://linux.oracle.com/errata/ELSA-2020-3285.html
https://lists.apache.org/thread.html/r00bcc6b2da972e0d6332a4ebc7807e17305d8b8e7fb2ae63d2a3cbfb@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r01ae1b3d981cf2e563e9b5b0a6ea54fb3cac8e9a0512ee5269e3420e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r0478a1aa9ae0dbd79d8f7b38d0d93fa933ac232e2b430b6f31a103c0@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r1aae77706aab7d89b4fe19be468fc3c73e9cc84ff79cc2c3bd07c05a@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r4bdea189c9991aae7a929d28f575ec46e49ed3d68fa5235825f38a4f@%3Cnotifications.netbeans.apache.org%3E
https://lists.apache.org/thread.html/r631f967db6260d6178740a3314a35d9421facd8212e62320275fa78e@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/r7f6d019839df17646ffd0046a99146cacf40492a6c92078f65fd32e0@%3Ccommits.camel.apache.org%3E
https://lists.apache.org/thread.html/rb89f92aba44f524d5c270e0c44ca7aec4704691c37fe106cf73ec977@%3Cnotifications.netbeans.apache.org%3E
https://lists.apache.org/thread.html/rfe363bf3a46d440ad57fd05c0e313025c7218364bbdc5fd8622ea7ae@%3Ccommits.camel.apache.org%3E
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCCAPM6FSNOC272DLSNQ6YHXS3OMHGJC/
https://nvd.nist.gov/vuln/detail/CVE-2020-13692
https://security.netapp.com/advisory/ntap-20200619-0005
https://security.netapp.com/advisory/ntap-20200619-0005/
https://ubuntu.com/security/notices/USN-5238-1
https://www.cve.org/CVERecord?id=CVE-2020-13692
https://www.debian.org/security/2022/dsa-5196
|
| org.postgresql:postgresql |
CVE-2022-21724 |
HIGH |
42.2.12 |
42.2.25, 42.3.2 |
https://access.redhat.com/security/cve/CVE-2022-21724
https://github.com/advisories/GHSA-v7wg-cpwc-24m4
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/f4d0ed69c0b3aae8531d83d6af4c57f22312c813
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-v7wg-cpwc-24m4
https://lists.debian.org/debian-lts-announce/2022/05/msg00027.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BVEO7BEFXPBVHSPYL3YKQWZI6DYXQLFS/
https://nvd.nist.gov/vuln/detail/CVE-2022-21724
https://security.netapp.com/advisory/ntap-20220311-0005
https://security.netapp.com/advisory/ntap-20220311-0005/
https://www.cve.org/CVERecord?id=CVE-2022-21724
https://www.debian.org/security/2022/dsa-5196
|
| org.postgresql:postgresql |
CVE-2022-31197 |
HIGH |
42.2.12 |
42.2.26, 42.4.1, 42.3.7 |
https://access.redhat.com/errata/RHSA-2023:0318
https://access.redhat.com/security/cve/CVE-2022-31197
https://bugzilla.redhat.com/2129428
https://bugzilla.redhat.com/show_bug.cgi?id=2129428
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-31197
https://errata.almalinux.org/9/ALSA-2023-0318.html
https://errata.rockylinux.org/RLSA-2023:0318
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/739e599d52ad80f8dcd6efedc6157859b1a9d637
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-r38f-c4h4-hqq2
https://linux.oracle.com/cve/CVE-2022-31197.html
https://linux.oracle.com/errata/ELSA-2023-0318.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00009.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I6WHUADTZBBQLVHO4YG4XCWDGWBT4LRP/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UTFE6SV33P5YYU2GNTQZQKQRVR3GYE4S/
https://nvd.nist.gov/vuln/detail/CVE-2022-31197
https://www.cve.org/CVERecord?id=CVE-2022-31197
|
| org.postgresql:postgresql |
CVE-2026-42198 |
HIGH |
42.2.12 |
42.7.11 |
https://access.redhat.com/errata/RHSA-2026:19098
https://access.redhat.com/errata/RHSA-2026:22304
https://access.redhat.com/errata/RHSA-2026:24348
https://access.redhat.com/errata/RHSA-2026:25030
https://access.redhat.com/errata/RHSA-2026:52928
https://access.redhat.com/errata/RHSA-2026:52929
https://access.redhat.com/errata/RHSA-2026:52930
https://access.redhat.com/errata/RHSA-2026:52978
https://access.redhat.com/errata/RHSA-2026:54532
https://access.redhat.com/errata/RHSA-2026:59277
https://access.redhat.com/errata/RHSA-2026:59278
https://access.redhat.com/errata/RHSA-2026:66488
https://access.redhat.com/errata/RHSA-2026:66545
https://access.redhat.com/security/cve/CVE-2026-42198
https://advisory.echohq.com/cve/CVE-2026-42198
https://bugzilla.redhat.com/2463857
https://bugzilla.redhat.com/show_bug.cgi?id=2463857
https://creativecommons.org/licenses/by/4.0/
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42198
https://errata.almalinux.org/9/ALSA-2026-22304.html
https://errata.rockylinux.org/RLSA-2026:22304
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq
https://linux.oracle.com/cve/CVE-2026-42198.html
https://linux.oracle.com/errata/ELSA-2026-25030.html
https://nvd.nist.gov/vuln/detail/CVE-2026-42198
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42198.json
https://www.cve.org/CVERecord?id=CVE-2026-42198
|
| org.postgresql:postgresql |
CVE-2022-41946 |
MEDIUM |
42.2.12 |
42.2.27, 42.3.8, 42.4.3, 42.5.1 |
https://access.redhat.com/errata/RHSA-2023:2378
https://access.redhat.com/security/cve/CVE-2022-41946
https://bugzilla.redhat.com/2153399
https://errata.almalinux.org/9/ALSA-2023-2378.html
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/9008dc9aade6dbfe4efafcd6872ebc55f4699cf5
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-562r-vg33-8x8h
https://linux.oracle.com/cve/CVE-2022-41946.html
https://linux.oracle.com/errata/ELSA-2023-2867.html
https://lists.debian.org/debian-lts-announce/2022/12/msg00003.html
https://lists.debian.org/debian-lts-announce/2024/12/msg00017.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/25TY2L3RMVNOC7VAHJEAO7PTT6M6JJAD/
https://nvd.nist.gov/vuln/detail/CVE-2022-41946
https://security.netapp.com/advisory/ntap-20240329-0003
https://security.netapp.com/advisory/ntap-20240329-0003/
https://www.cve.org/CVERecord?id=CVE-2022-41946
|
| org.postgresql:postgresql |
GHSA-673j-qm5f-xpv8 |
MEDIUM |
42.2.12 |
42.3.3 |
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/commit/f6d47034a4ce292e1a659fa00963f6f713117064
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
|
| org.postgresql:postgresql |
CVE-2022-26520 |
LOW |
42.2.12 |
42.3.3 |
https://access.redhat.com/security/cve/CVE-2022-26520
https://github.com/pgjdbc/pgjdbc
https://github.com/pgjdbc/pgjdbc/pull/2454/commits/017b929977b4f85795f9ad2fa5de6e80978b8ccc
https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-673j-qm5f-xpv8
https://jdbc.postgresql.org/documentation/changelog.html#version_42.3.3
https://jdbc.postgresql.org/documentation/head/tomcat.html
https://nvd.nist.gov/vuln/detail/CVE-2022-26520
https://www.cve.org/CVERecord?id=CVE-2022-26520
https://www.debian.org/security/2022/dsa-5196
|
| org.springframework.batch:spring-batch-core |
CVE-2020-5411 |
HIGH |
4.2.2.RELEASE |
4.2.3 |
https://access.redhat.com/security/cve/CVE-2020-5411
https://github.com/spring-projects/spring-batch
https://nvd.nist.gov/vuln/detail/CVE-2020-5411
https://tanzu.vmware.com/security/cve-2020-5411
https://www.cve.org/CVERecord?id=CVE-2020-5411
|
| org.springframework.boot:spring-boot |
CVE-2025-22235 |
HIGH |
2.3.0.RELEASE |
3.3.11, 3.4.5 |
https://access.redhat.com/security/cve/CVE-2025-22235
https://advisory.echohq.com/cve/CVE-2025-22235
https://github.com/advisories/GHSA-rc42-6c7j-7h5r
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2025-22235
https://security.netapp.com/advisory/ntap-20250516-0010
https://security.netapp.com/advisory/ntap-20250516-0010/
https://spring.io/security/cve-2025-22235
https://www.cve.org/CVERecord?id=CVE-2025-22235
|
| org.springframework.boot:spring-boot |
CVE-2026-40973 |
HIGH |
2.3.0.RELEASE |
4.0.6, 3.5.14 |
https://access.redhat.com/security/cve/CVE-2026-40973
https://advisory.echohq.com/cve/CVE-2026-40973
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2026-40973
https://spring.io/security/cve-2026-40973
https://www.cve.org/CVERecord?id=CVE-2026-40973
|
| org.springframework.boot:spring-boot-actuator |
CVE-2023-34055 |
MEDIUM |
2.3.0.RELEASE |
2.7.18, 3.0.13, 3.1.6 |
https://access.redhat.com/security/cve/CVE-2023-34055
https://github.com/spring-projects/spring-boot
https://github.com/spring-projects/spring-boot/commit/5490e73922b37a7f0bdde43eb318cb1038b45d60
https://nvd.nist.gov/vuln/detail/CVE-2023-34055
https://security.netapp.com/advisory/ntap-20231221-0010
https://security.netapp.com/advisory/ntap-20231221-0010/
https://security.snyk.io/vuln/SNYK-JAVA-ORGSPRINGFRAMEWORKBOOT-6226862
https://spring.io/security/cve-2023-34055
https://www.cve.org/CVERecord?id=CVE-2023-34055
|
| org.springframework.boot:spring-boot-actuator-autoconfigure |
CVE-2023-20873 |
CRITICAL |
2.3.0.RELEASE |
3.0.6, 2.7.11, 2.6.15, 2.5.15 |
https://access.redhat.com/security/cve/CVE-2023-20873
https://github.com/advisories/GHSA-g5h3-w546-pj7f
https://github.com/spring-projects/spring-boot
https://github.com/spring-projects/spring-boot/commit/32444fed4b51cc58dc908467f706102d7f0bfc15
https://github.com/spring-projects/spring-boot/commit/3522714c13b47af03bf42e7f2d5994af568cb1a7
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.15
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.15
https://github.com/spring-projects/spring-boot/releases/tag/v2.7.11
https://github.com/spring-projects/spring-boot/releases/tag/v3.0.6
https://nvd.nist.gov/vuln/detail/CVE-2023-20873
https://security.netapp.com/advisory/ntap-20230601-0009
https://security.netapp.com/advisory/ntap-20230601-0009/
https://spring.io/blog/2023/05/18/spring-boot-2-5-15-and-2-6-15-available-now
https://spring.io/security/cve-2023-20873
https://spring.io/security/cve-2023-20873/
https://www.cve.org/CVERecord?id=CVE-2023-20873
|
| org.springframework.boot:spring-boot-autoconfigure |
CVE-2023-20883 |
HIGH |
2.3.0.RELEASE |
3.0.7, 2.7.12, 2.6.15, 2.5.15 |
https://access.redhat.com/security/cve/CVE-2023-20883
https://github.com/spring-projects/spring-boot
https://github.com/spring-projects/spring-boot/commit/418dd1ba5bdad79b55a043000164bfcbda2acd78
https://github.com/spring-projects/spring-boot/issues/35552
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.15
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.15
https://github.com/spring-projects/spring-boot/releases/tag/v2.7.12
https://nvd.nist.gov/vuln/detail/CVE-2023-20883
https://security.netapp.com/advisory/ntap-20230703-0008
https://security.netapp.com/advisory/ntap-20230703-0008/
https://spring.io/security/cve-2023-20883
https://www.cve.org/CVERecord?id=CVE-2023-20883
|
| org.springframework.boot:spring-boot-starter-actuator |
CVE-2026-22733 |
HIGH |
2.3.0.RELEASE |
4.0.4, 3.5.12 |
https://advisory.echohq.com/cve/CVE-2026-22733
https://github.com/advisories/GHSA-mgvc-8q2h-5pgc
https://github.com/spring-projects/spring-boot
https://nvd.nist.gov/vuln/detail/CVE-2026-22733
https://spring.io/security/cve-2026-22733
|
| org.springframework.boot:spring-boot-starter-web |
CVE-2022-22965 |
CRITICAL |
2.3.0.RELEASE |
2.5.12, 2.6.6 |
http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2022-22965
https://bugalert.org/content/notices/2022-03-30-spring.html
https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
https://github.com/spring-projects/spring-framework/issues/28260
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
https://tanzu.vmware.com/security/cve-2022-22965
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
https://ubuntu.com/security/notices/USN-7165-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
https://www.cve.org/CVERecord?id=CVE-2022-22965
https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html
https://www.kb.cert.org/vuls/id/970766
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.praetorian.com/blog/spring-core-jdk9-rce/
|
| org.springframework.data:spring-data-commons |
CVE-2026-41716 |
HIGH |
2.3.0.RELEASE |
4.0.6, 3.5.12 |
https://access.redhat.com/security/cve/CVE-2026-41716
https://github.com/spring-projects/spring-data-commons
https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12
https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6
https://nvd.nist.gov/vuln/detail/CVE-2026-41716
https://spring.io/security/cve-2026-41716
https://www.cve.org/CVERecord?id=CVE-2026-41716
|
| org.springframework.data:spring-data-commons |
CVE-2026-41711 |
MEDIUM |
2.3.0.RELEASE |
4.0.6, 3.5.12 |
https://access.redhat.com/security/cve/CVE-2026-41711
https://github.com/spring-projects/spring-data-commons
https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12
https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6
https://nvd.nist.gov/vuln/detail/CVE-2026-41711
https://spring.io/security/cve-2026-41711
https://www.cve.org/CVERecord?id=CVE-2026-41711
|
| org.springframework.data:spring-data-commons |
CVE-2026-41721 |
MEDIUM |
2.3.0.RELEASE |
4.0.6, 3.5.12 |
https://access.redhat.com/security/cve/CVE-2026-41721
https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12
https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6
https://nvd.nist.gov/vuln/detail/CVE-2026-41721
https://spring.io/security/cve-2026-41721
https://www.cve.org/CVERecord?id=CVE-2026-41721
|
| org.springframework.retry:spring-retry |
CVE-2026-41710 |
MEDIUM |
1.2.5.RELEASE |
2.0.13 |
https://access.redhat.com/security/cve/CVE-2026-41710
https://github.com/spring-attic/spring-retry/commit/6f351edae3d3575fffbde3c0f62fef963dacd152
https://github.com/spring-attic/spring-retry/issues/505
https://github.com/spring-attic/spring-retry/releases/tag/v2.0.13
https://github.com/spring-projects/spring-retry
https://nvd.nist.gov/vuln/detail/CVE-2026-41710
https://spring.io/security/cve-2026-41710
https://www.cve.org/CVERecord?id=CVE-2026-41710
|
| org.springframework.security:spring-security-core |
CVE-2022-22978 |
CRITICAL |
5.3.2.RELEASE |
5.5.7, 5.6.4, 5.4.11 |
https://access.redhat.com/security/cve/CVE-2022-22978
https://github.com/anchore/grype/issues/2158
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/blob/main/web/src/main/java/org/springframework/security/web/util/matcher/RegexRequestMatcher.java
https://nvd.nist.gov/vuln/detail/CVE-2022-22978
https://security.netapp.com/advisory/ntap-20220707-0003
https://spring.io/security/cve-2022-22978
https://tanzu.vmware.com/security/cve-2022-22978
https://www.cve.org/CVERecord?id=CVE-2022-22978
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework.security:spring-security-core |
CVE-2021-22119 |
HIGH |
5.3.2.RELEASE |
5.5.1, 5.4.7, 5.3.10, 5.2.11 |
https://access.redhat.com/security/cve/CVE-2021-22119
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/pull/9513
https://lists.apache.org/thread.html/r08a449010786e0bcffa4b5781b04fcb55d6eafa62cb79b8347680aad@%3Cissues.nifi.apache.org%3E
https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/ra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc@%3Cpluto-scm.portals.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-22119
https://tanzu.vmware.com/security/cve-2021-22119
https://www.cve.org/CVERecord?id=CVE-2021-22119
https://www.oracle.com/security-alerts/cpujan2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework.security:spring-security-core |
CVE-2024-22257 |
HIGH |
5.3.2.RELEASE |
5.7.12, 5.8.11, 6.1.8, 6.2.3 |
https://access.redhat.com/security/cve/CVE-2024-22257
https://advisory.echohq.com/cve/CVE-2024-22257
https://github.com/advisories/GHSA-f3jh-qvm4-mg39
https://github.com/dependency-check/DependencyCheck/issues/8642
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/commit/5a7f12f1a9fdb4edaab6f61495f1d781a7273b61
https://nvd.nist.gov/vuln/detail/CVE-2024-22257
https://security.netapp.com/advisory/ntap-20240419-0005
https://security.netapp.com/advisory/ntap-20240419-0005/
https://spring.io/security/cve-2024-22257
https://www.cve.org/CVERecord?id=CVE-2024-22257
|
| org.springframework.security:spring-security-core |
CVE-2022-22976 |
MEDIUM |
5.3.2.RELEASE |
5.5.7, 5.6.4 |
https://access.redhat.com/security/cve/CVE-2022-22976
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/commit/388a7b62b906bd56deadb7ca45248fa1a63bdf12
https://github.com/spring-projects/spring-security/commit/a40f73521c0dd88b879ff6165d280e78bdf8154f
https://nvd.nist.gov/vuln/detail/CVE-2022-22976
https://security.netapp.com/advisory/ntap-20220707-0003
https://security.netapp.com/advisory/ntap-20220707-0003/
https://tanzu.vmware.com/security/cve-2022-22976
https://www.cve.org/CVERecord?id=CVE-2022-22976
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework.security:spring-security-core |
CVE-2024-38827 |
MEDIUM |
5.3.2.RELEASE |
5.7.14, 5.8.16, 6.0.14, 6.1.12, 6.2.8, 6.3.5 |
https://access.redhat.com/security/cve/CVE-2024-38827
https://advisory.echohq.com/cve/CVE-2024-38827
https://github.com/advisories/GHSA-q3v6-hm2v-pw99
https://github.com/spring-projects/spring-framework/commit/11d4272ff48b4a4dabc4b28dfbff0364a4204bc9
https://github.com/spring-projects/spring-framework/issues/33708
https://github.com/spring-projects/spring-framework/issues/34232
https://github.com/spring-projects/spring-security
https://nvd.nist.gov/vuln/detail/CVE-2024-38827
https://security.netapp.com/advisory/ntap-20250124-0007
https://security.netapp.com/advisory/ntap-20250124-0007/
https://spring.io/security/cve-2024-38827
https://www.cve.org/CVERecord?id=CVE-2024-38827
|
| org.springframework.security:spring-security-web |
CVE-2022-22978 |
CRITICAL |
5.3.2.RELEASE |
5.5.7, 5.6.4, 5.4.11 |
https://access.redhat.com/security/cve/CVE-2022-22978
https://github.com/anchore/grype/issues/2158
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/blob/main/web/src/main/java/org/springframework/security/web/util/matcher/RegexRequestMatcher.java
https://nvd.nist.gov/vuln/detail/CVE-2022-22978
https://security.netapp.com/advisory/ntap-20220707-0003
https://spring.io/security/cve-2022-22978
https://tanzu.vmware.com/security/cve-2022-22978
https://www.cve.org/CVERecord?id=CVE-2022-22978
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework.security:spring-security-web |
CVE-2024-38821 |
CRITICAL |
5.3.2.RELEASE |
5.7.13, 5.8.15, 6.2.7, 6.0.13, 6.1.11, 6.3.4 |
https://access.redhat.com/security/cve/CVE-2024-38821
https://advisory.echohq.com/cve/CVE-2024-38821
https://github.com/advisories/GHSA-c4q5-6c82-3qpw
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/commit/0e257b56ce35402558a260ffa6b368982f9a7934
https://github.com/spring-projects/spring-security/commit/4ce7cde15599c0447163fd46bac616e03318bf5b
https://github.com/spring-projects/spring-security/commit/b4f27777556c157ec5689c0769322c90be984514
https://nvd.nist.gov/vuln/detail/CVE-2024-38821
https://security.netapp.com/advisory/ntap-20250124-0006
https://security.netapp.com/advisory/ntap-20250124-0006/
https://spring.io/security/cve-2024-38821
https://www.cve.org/CVERecord?id=CVE-2024-38821
|
| org.springframework.security:spring-security-web |
CVE-2026-22732 |
CRITICAL |
5.3.2.RELEASE |
6.5.9, 7.0.4 |
https://access.redhat.com/security/cve/CVE-2026-22732
https://advisory.echohq.com/cve/CVE-2026-22732
https://github.com/advisories/GHSA-mf92-479x-3373
https://github.com/spring-projects/spring-security
https://nvd.nist.gov/vuln/detail/CVE-2026-22732
https://spring.io/security/cve-2026-22732
https://www.cve.org/CVERecord?id=CVE-2026-22732
|
| org.springframework.security:spring-security-web |
CVE-2021-22112 |
HIGH |
5.3.2.RELEASE |
5.4.4, 5.3.8, 5.2.9 |
http://www.openwall.com/lists/oss-security/2021/02/19/7
https://access.redhat.com/security/cve/CVE-2021-22112
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/releases/tag/5.4.4
https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r2cb05e499807900ba23e539643eead9c5f0652fd271f223f89da1804@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/r37423ec7eea340e92a409452c35b649dce02fdc467f0b3f52086c177@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r413e380088c427f56102968df89ef2f336473e1b56b7d4b3a571a378@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/r89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/ra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc@%3Cpluto-scm.portals.apache.org%3E
https://lists.apache.org/thread.html/ra6389b1b82108a3b6bbcd22979f7665fd437c2a3408c9509a15a9ca1@%3Cpluto-dev.portals.apache.org%3E
https://lists.apache.org/thread.html/redbd004a503b3520ae5746c2ab5e93fd7da807a8c128e60d2002cd9b@%3Cissues.nifi.apache.org%3E
https://nvd.nist.gov/vuln/detail/CVE-2021-22112
https://tanzu.vmware.com/security/cve-2021-22112
https://www.cve.org/CVERecord?id=CVE-2021-22112
https://www.jenkins.io/security/advisory/2021-02-19
https://www.jenkins.io/security/advisory/2021-02-19/
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuApr2021.html
https://www.oracle.com/security-alerts/cpuoct2021.html
|
| org.springframework.security:spring-security-web |
CVE-2026-41706 |
MEDIUM |
5.3.2.RELEASE |
7.0.6, 6.5.11 |
https://advisory.echohq.com/cve/CVE-2026-41706
https://github.com/advisories/GHSA-x2r2-rvhq-2mqv
https://github.com/spring-projects/spring-security
https://github.com/spring-projects/spring-security/releases/tag/6.5.11
https://github.com/spring-projects/spring-security/releases/tag/7.0.6
https://nvd.nist.gov/vuln/detail/CVE-2026-41706
https://spring.io/security/cve-2026-41706
|
| org.springframework.security:spring-security-web |
CVE-2026-47838 |
MEDIUM |
5.3.2.RELEASE |
6.5.11 |
https://advisory.echohq.com/cve/CVE-2026-47838
https://github.com/advisories/GHSA-2jrg-rf5x-568g
https://nvd.nist.gov/vuln/detail/CVE-2026-47838
https://spring.io/security/cve-2026-47838
spring-projects/spring-security
|
| org.springframework:spring-beans |
CVE-2022-22965 |
CRITICAL |
5.3.13 |
5.2.20.RELEASE, 5.3.18 |
http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2022-22965
https://bugalert.org/content/notices/2022-03-30-spring.html
https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
https://github.com/spring-projects/spring-framework/issues/28260
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
https://tanzu.vmware.com/security/cve-2022-22965
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
https://ubuntu.com/security/notices/USN-7165-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
https://www.cve.org/CVERecord?id=CVE-2022-22965
https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html
https://www.kb.cert.org/vuls/id/970766
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.praetorian.com/blog/spring-core-jdk9-rce/
|
| org.springframework:spring-beans |
CVE-2022-22970 |
HIGH |
5.3.13 |
5.2.22.RELEASE, 5.3.20 |
https://access.redhat.com/security/cve/CVE-2022-22970
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/50177b1ad3485bd44239b1756f6c14607476fcf2
https://github.com/spring-projects/spring-framework/commit/83186b689f11f5e6efe7ccc08fdeb92f66fcd583
https://nvd.nist.gov/vuln/detail/CVE-2022-22970
https://security.netapp.com/advisory/ntap-20220616-0006
https://security.netapp.com/advisory/ntap-20220616-0006/
https://tanzu.vmware.com/security/cve-2022-22970
https://www.cve.org/CVERecord?id=CVE-2022-22970
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2022-22968 |
HIGH |
5.3.13 |
5.3.19, 5.2.21.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22968
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/833e750175349ab4fd502109a8b41af77e25cdea
https://github.com/spring-projects/spring-framework/commit/a7cf19cec5ebd270f97a194d749e2d5701ad2ab7
https://nvd.nist.gov/vuln/detail/CVE-2022-22968
https://security.netapp.com/advisory/ntap-20220602-0004
https://security.netapp.com/advisory/ntap-20220602-0004/
https://tanzu.vmware.com/security/cve-2022-22968
https://www.cve.org/CVERecord?id=CVE-2022-22968
https://www.oracle.com/security-alerts/cpujul2022.html
|
| org.springframework:spring-context |
CVE-2024-38820 |
MEDIUM |
5.3.13 |
6.1.14 |
https://advisory.echohq.com/cve/CVE-2024-38820
https://github.com/advisories/GHSA-4gc7-5j7h-4qph
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c
https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2
https://nvd.nist.gov/vuln/detail/CVE-2024-38820
https://security.netapp.com/advisory/ntap-20241129-0003
https://security.netapp.com/advisory/ntap-20241129-0003/
https://spring.io/security/cve-2024-38820
|
| org.springframework:spring-context |
CVE-2025-22233 |
LOW |
5.3.13 |
6.2.7, 6.1.20 |
https://advisory.echohq.com/cve/CVE-2025-22233
https://github.com/advisories/GHSA-4wp7-92pw-q264
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/edfcc6ffb188e4614ec9b212e3208b666981851c
https://github.com/spring-projects/spring-framework/commit/ee62701f5634e904e42e218baad142cea2bcd332
https://github.com/spring-projects/spring-framework/issues/34801
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2025-22233
https://spring.io/security/cve-2025-22233
|
| org.springframework:spring-core |
CVE-2025-41249 |
HIGH |
5.3.13 |
6.2.11 |
https://access.redhat.com/security/cve/CVE-2025-41249
https://advisory.echohq.com/cve/CVE-2025-41249
https://github.com/advisories/GHSA-jmp9-x22r-554x
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/6d710d482a6785b069e35022e81758953afc21ff
https://github.com/spring-projects/spring-framework/issues/35342
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.11
https://nvd.nist.gov/vuln/detail/CVE-2025-41249
https://spring.io/security/cve-2025-41249
https://www.cve.org/CVERecord?id=CVE-2025-41249
|
| org.springframework:spring-core |
CVE-2021-22060 |
MEDIUM |
5.3.13 |
5.3.14, 5.2.19 |
https://access.redhat.com/security/cve/CVE-2021-22060
https://nvd.nist.gov/vuln/detail/CVE-2021-22060
https://tanzu.vmware.com/security/cve-2021-22060
https://www.cve.org/CVERecord?id=CVE-2021-22060
https://www.oracle.com/security-alerts/cpuapr2022.html
|
| org.springframework:spring-core |
CVE-2026-41848 |
LOW |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41848
https://advisory.echohq.com/cve/CVE-2026-41848
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41848
https://spring.io/security/cve-2026-41848
https://www.cve.org/CVERecord?id=CVE-2026-41848
|
| org.springframework:spring-expression |
CVE-2023-20863 |
HIGH |
5.3.13 |
6.0.8, 5.3.27, 5.2.24.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20863
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/965a6392757d20f9db19241126fcc719a51eac15
https://github.com/spring-projects/spring-framework/commit/b73f5fcac22555f844cf27a7eeb876cb9d7f7f7e
https://github.com/spring-projects/spring-framework/commit/ebc82654282bda547fbc20a9749ab1bda886a46f
https://nvd.nist.gov/vuln/detail/CVE-2023-20863
https://security.netapp.com/advisory/ntap-20240524-0015
https://security.netapp.com/advisory/ntap-20240524-0015/
https://spring.io/security/cve-2023-20863
https://www.cve.org/CVERecord?id=CVE-2023-20863
|
| org.springframework:spring-expression |
CVE-2026-41849 |
HIGH |
5.3.13 |
|
https://access.redhat.com/security/cve/CVE-2026-41849
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-41849
https://spring.io/security/cve-2026-41849
https://www.cve.org/CVERecord?id=CVE-2026-41849
|
| org.springframework:spring-expression |
CVE-2026-41850 |
HIGH |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41850
https://advisory.echohq.com/cve/CVE-2026-41850
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41850
https://spring.io/security/cve-2026-41850
https://www.cve.org/CVERecord?id=CVE-2026-41850
|
| org.springframework:spring-expression |
CVE-2022-22950 |
MEDIUM |
5.3.13 |
5.3.17, 5.2.20.RELEASE |
https://access.redhat.com/security/cve/CVE-2022-22950
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/83ac65915871067c39a4fb255e0d484c785c0c11
https://github.com/spring-projects/spring-framework/issues/28145
https://github.com/spring-projects/spring-framework/issues/28257
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.17
https://nvd.nist.gov/vuln/detail/CVE-2022-22950
https://tanzu.vmware.com/security/cve-2022-22950
https://www.cve.org/CVERecord?id=CVE-2022-22950
|
| org.springframework:spring-expression |
CVE-2023-20861 |
MEDIUM |
5.3.13 |
6.0.7, 5.3.26, 5.2.23.RELEASE |
https://access.redhat.com/security/cve/CVE-2023-20861
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/430fc25acad2e85cbdddcd52b64481691f03ebd1
https://github.com/spring-projects/spring-framework/commit/52c93b1c4b24d70de233a958e60e7c5822bd274f
https://github.com/spring-projects/spring-framework/commit/935c29e3ddba5b19951e54f6685c70ed45d9cbe5
https://nvd.nist.gov/vuln/detail/CVE-2023-20861
https://security.netapp.com/advisory/ntap-20230420-0007
https://security.netapp.com/advisory/ntap-20230420-0007/
https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861
https://spring.io/security/cve-2023-20861
https://www.cve.org/CVERecord?id=CVE-2023-20861
|
| org.springframework:spring-expression |
CVE-2024-38808 |
MEDIUM |
5.3.13 |
5.3.39 |
https://access.redhat.com/security/cve/CVE-2024-38808
https://advisory.echohq.com/cve/CVE-2024-38808
https://github.com/advisories/GHSA-9cmq-m9j5-mvww
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/26f2dad388499faecf99e75b8856788e95d8d658
https://github.com/spring-projects/spring-framework/commit/f44d13cb7816e586b86c02421af4f5498391111c
https://nvd.nist.gov/vuln/detail/CVE-2024-38808
https://security.netapp.com/advisory/ntap-20240920-0002
https://security.netapp.com/advisory/ntap-20240920-0002/
https://spring.io/security/cve-2024-38808
https://www.cve.org/CVERecord?id=CVE-2024-38808
|
| org.springframework:spring-expression |
CVE-2026-41851 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41851
https://advisory.echohq.com/cve/CVE-2026-41851
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb
https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41851
https://spring.io/security/cve-2026-41851
https://www.cve.org/CVERecord?id=CVE-2026-41851
|
| org.springframework:spring-expression |
CVE-2026-41852 |
LOW |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41852
https://advisory.echohq.com/cve/CVE-2026-41852
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41852
https://spring.io/security/cve-2026-41852
https://www.cve.org/CVERecord?id=CVE-2026-41852
|
| org.springframework:spring-web |
CVE-2016-1000027 |
CRITICAL |
5.3.13 |
6.0.0 |
https://access.redhat.com/security/cve/CVE-2016-1000027
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-1000027
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/2b051b8b321768a4cfef83077db65c6328ffd60f
https://github.com/spring-projects/spring-framework/commit/5cbe90b2cd91b866a5a9586e460f311860e11cfa
https://github.com/spring-projects/spring-framework/issues/21680
https://github.com/spring-projects/spring-framework/issues/24434
https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-1231625331
https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-579669626
https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-582313417
https://github.com/spring-projects/spring-framework/issues/24434#issuecomment-744519525
https://jira.spring.io/browse/SPR-17143?redirect=false
https://nvd.nist.gov/vuln/detail/CVE-2016-1000027
https://raw.githubusercontent.com/distributedweaknessfiling/cvelist/master/2016/1000xxx/CVE-2016-1000027.json
https://security-tracker.debian.org/tracker/CVE-2016-1000027
https://security.netapp.com/advisory/ntap-20230420-0009
https://security.netapp.com/advisory/ntap-20230420-0009/
https://spring.io/blog/2022/05/11/spring-framework-5-3-20-and-5-2-22-available-now
https://support.contrastsecurity.com/hc/en-us/articles/4402400830612-Spring-web-Java-Deserialization-CVE-2016-1000027
https://www.cve.org/CVERecord?id=CVE-2016-1000027
https://www.tenable.com/security/research/tra-2016-20
|
| org.springframework:spring-web |
CVE-2024-22243 |
HIGH |
5.3.13 |
6.1.4, 6.0.17, 5.3.32 |
http://seclists.org/fulldisclosure/2024/Sep/24
https://access.redhat.com/security/cve/CVE-2024-22243
https://advisory.echohq.com/cve/CVE-2024-22243
https://github.com/advisories/GHSA-ccgv-vj62-xf9h
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java
https://nvd.nist.gov/vuln/detail/CVE-2024-22243
https://security.netapp.com/advisory/ntap-20240524-0001
https://security.netapp.com/advisory/ntap-20240524-0001/
https://spring.io/security/cve-2024-22243
https://www.cve.org/CVERecord?id=CVE-2024-22243
|
| org.springframework:spring-web |
CVE-2024-22259 |
HIGH |
5.3.13 |
6.1.5, 6.0.18, 5.3.33 |
https://access.redhat.com/security/cve/CVE-2024-22259
https://advisory.echohq.com/cve/CVE-2024-22259
https://github.com/advisories/GHSA-hgjh-9rj2-g67j
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/297cbae2990e1413537c55845a7e0ea0ffd9f9bb
https://github.com/spring-projects/spring-framework/commit/381f790329a48b74c2a49fc1384dd68ca9153501
https://github.com/spring-projects/spring-framework/commit/f2fd2f12269c6a781c5b2c20b3c24141055a3d68
https://nvd.nist.gov/vuln/detail/CVE-2024-22259
https://security.netapp.com/advisory/ntap-20240524-0002
https://security.netapp.com/advisory/ntap-20240524-0002/
https://spring.io/security/cve-2024-22259
https://www.cve.org/CVERecord?id=CVE-2024-22259
|
| org.springframework:spring-web |
CVE-2024-22262 |
HIGH |
5.3.13 |
5.3.34, 6.0.19, 6.1.6 |
https://access.redhat.com/security/cve/CVE-2024-22262
https://advisory.echohq.com/cve/CVE-2024-22262
https://github.com/advisories/GHSA-2wrp-6fg6-hmc5
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/blob/main/spring-web/src/main/java/org/springframework/web/util/UriComponentsBuilder.java
https://nvd.nist.gov/vuln/detail/CVE-2024-22262
https://security.netapp.com/advisory/ntap-20240524-0003
https://security.netapp.com/advisory/ntap-20240524-0003/
https://spring.io/security/cve-2024-22262
https://www.cve.org/CVERecord?id=CVE-2024-22262
|
| org.springframework:spring-web |
CVE-2024-38809 |
MEDIUM |
5.3.13 |
5.3.38, 6.0.23, 6.1.12 |
http://github.com/spring-projects/spring-framework
https://access.redhat.com/security/cve/CVE-2024-38809
https://advisory.echohq.com/cve/CVE-2024-38809
https://github.com/advisories/GHSA-2rmj-mq67-h97g
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/582bfccbb72e5c8959a0b472d1dc7d03a20520f3
https://github.com/spring-projects/spring-framework/commit/8d16a50907c11f7e6b407d878a26e84eba08a533
https://github.com/spring-projects/spring-framework/commit/bb17ad8314b81850a939fd265fb53b3361705e85
https://github.com/spring-projects/spring-framework/issues/33372
https://nvd.nist.gov/vuln/detail/CVE-2024-38809
https://security.netapp.com/advisory/ntap-20240920-0003/
https://spring.io/security/cve-2024-38809
https://www.cve.org/CVERecord?id=CVE-2024-38809
|
| org.springframework:spring-web |
CVE-2024-38820 |
MEDIUM |
5.3.13 |
6.1.14 |
https://advisory.echohq.com/cve/CVE-2024-38820
https://github.com/advisories/GHSA-4gc7-5j7h-4qph
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/23656aebc6c7d0f9faff1080981eb4d55eff296c
https://github.com/spring-projects/spring-framework/commits/v6.2.0-RC2
https://nvd.nist.gov/vuln/detail/CVE-2024-38820
https://security.netapp.com/advisory/ntap-20241129-0003
https://security.netapp.com/advisory/ntap-20241129-0003/
https://spring.io/security/cve-2024-38820
|
| org.springframework:spring-webmvc |
CVE-2022-22965 |
CRITICAL |
5.3.13 |
5.2.20.RELEASE, 5.3.18 |
http://packetstormsecurity.com/files/166713/Spring4Shell-Code-Execution.html
http://packetstormsecurity.com/files/167011/Spring4Shell-Spring-Framework-Class-Property-Remote-Code-Execution.html
https://access.redhat.com/security/cve/CVE-2022-22965
https://bugalert.org/content/notices/2022-03-30-spring.html
https://cert-portal.siemens.com/productcert/pdf/ssa-254054.pdf
https://github.com/spring-projects/spring-boot/releases/tag/v2.5.12
https://github.com/spring-projects/spring-boot/releases/tag/v2.6.6
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/002546b3e4b8d791ea6acccb81eb3168f51abb15
https://github.com/spring-projects/spring-framework/issues/28260
https://github.com/spring-projects/spring-framework/releases/tag/v5.2.20.RELEASE
https://github.com/spring-projects/spring-framework/releases/tag/v5.3.18
https://nvd.nist.gov/vuln/detail/CVE-2022-22965
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2022-0005
https://spring.io/blog/2022/03/31/spring-framework-rce-early-announcement
https://tanzu.vmware.com/security/cve-2022-22965
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-java-spring-rce-Zx9GUc67
https://ubuntu.com/security/notices/USN-7165-1
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-22965
https://www.cve.org/CVERecord?id=CVE-2022-22965
https://www.cyberkendra.com/2022/03/spring4shell-details-and-exploit-code.html
https://www.kb.cert.org/vuls/id/970766
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujul2022.html
https://www.praetorian.com/blog/spring-core-jdk9-rce/
|
| org.springframework:spring-webmvc |
CVE-2023-20860 |
CRITICAL |
5.3.13 |
6.0.7, 5.3.26 |
https://access.redhat.com/security/cve/CVE-2023-20860
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/202fa5cdb3a3d0cfe6967e85fa167d978244f28a
https://nvd.nist.gov/vuln/detail/CVE-2023-20860
https://security.netapp.com/advisory/ntap-20230505-0006
https://security.netapp.com/advisory/ntap-20230505-0006/
https://spring.io/blog/2023/03/20/spring-framework-6-0-7-and-5-3-26-fix-cve-2023-20860-and-cve-2023-20861
https://spring.io/security/cve-2023-20860
https://www.cve.org/CVERecord?id=CVE-2023-20860
|
| org.springframework:spring-webmvc |
CVE-2026-47884 |
CRITICAL |
5.3.13 |
7.0.9 |
https://access.redhat.com/security/cve/CVE-2026-47884
https://advisory.echohq.com/cve/CVE-2026-47884
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b
https://nvd.nist.gov/vuln/detail/CVE-2026-47884
https://spring.io/security/cve-2026-47884
https://www.cve.org/CVERecord?id=CVE-2026-47884
|
| org.springframework:spring-webmvc |
CVE-2024-38816 |
HIGH |
5.3.13 |
6.1.13 |
https://access.redhat.com/security/cve/CVE-2024-38816
https://advisory.echohq.com/cve/CVE-2024-38816
https://github.com/advisories/GHSA-cx7f-g6mp-7hqm
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/d86bf8b2056429edf5494456cffcb2b243331c49
https://nvd.nist.gov/vuln/detail/CVE-2024-38816
https://security.netapp.com/advisory/ntap-20241227-0001
https://security.netapp.com/advisory/ntap-20241227-0001/
https://spring.io/security/cve-2024-38816
https://www.cve.org/CVERecord?id=CVE-2024-38816
|
| org.springframework:spring-webmvc |
CVE-2024-38819 |
HIGH |
5.3.13 |
6.1.14 |
https://access.redhat.com/security/cve/CVE-2024-38819
https://advisory.echohq.com/cve/CVE-2024-38819
https://github.com/advisories/GHSA-g5vr-rgqm-vf78
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/3bfbe30a7814c9ea1556d40df9bd87ddb3ba372d
https://github.com/spring-projects/spring-framework/commit/fb7890d73975a3d9e0763e0926df2bd0a608e87e
https://github.com/spring-projects/spring-framework/issues/33689
https://nvd.nist.gov/vuln/detail/CVE-2024-38819
https://security.netapp.com/advisory/ntap-20250110-0010
https://security.netapp.com/advisory/ntap-20250110-0010/
https://spring.io/security/cve-2024-38819
https://www.cve.org/CVERecord?id=CVE-2024-38819
|
| org.springframework:spring-webmvc |
CVE-2026-41842 |
HIGH |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41842
https://advisory.echohq.com/cve/CVE-2026-41842
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41842
https://spring.io/security/cve-2026-41842
https://www.cve.org/CVERecord?id=CVE-2026-41842
|
| org.springframework:spring-webmvc |
CVE-2026-41845 |
HIGH |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41845
https://advisory.echohq.com/cve/CVE-2026-41845
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/86d99790dbaa8ce6bb1087ef92844d0abfdab015
https://github.com/spring-projects/spring-framework/commit/a1826b725c29fbb175fa7b4fc005aa3d78c32015
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41845
https://spring.io/security/cve-2026-41845
https://www.cve.org/CVERecord?id=CVE-2026-41845
|
| org.springframework:spring-webmvc |
CVE-2024-38828 |
MEDIUM |
5.3.13 |
5.3.42 |
https://access.redhat.com/security/cve/CVE-2024-38828
https://advisory.echohq.com/cve/CVE-2024-38828
https://github.com/advisories/GHSA-w3c8-7r8f-9jp8
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2024-38828
https://security.netapp.com/advisory/ntap-20250509-0009
https://security.netapp.com/advisory/ntap-20250509-0009/
https://spring.io/security/cve-2024-38828
https://www.cve.org/CVERecord?id=CVE-2024-38828
|
| org.springframework:spring-webmvc |
CVE-2025-41242 |
MEDIUM |
5.3.13 |
6.2.10 |
http://spring.io/security/cve-2025-41242
https://access.redhat.com/security/cve/CVE-2025-41242
https://advisory.echohq.com/cve/CVE-2025-41242
https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title
https://github.com/advisories/GHSA-r936-gwx5-v52f
https://github.com/spring-projects/spring-framework
https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization
https://nvd.nist.gov/vuln/detail/CVE-2025-41242
https://www.cve.org/CVERecord?id=CVE-2025-41242
|
| org.springframework:spring-webmvc |
CVE-2026-22737 |
MEDIUM |
5.3.13 |
7.0.6, 6.2.17 |
https://access.redhat.com/security/cve/CVE-2026-22737
https://advisory.echohq.com/cve/CVE-2026-22737
https://github.com/advisories/GHSA-4773-3jfm-qmx3
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-22737
https://spring.io/security/cve-2026-22737
https://www.cve.org/CVERecord?id=CVE-2026-22737
|
| org.springframework:spring-webmvc |
CVE-2026-22745 |
MEDIUM |
5.3.13 |
7.0.7, 6.2.18 |
https://access.redhat.com/security/cve/CVE-2026-22745
https://advisory.echohq.com/cve/CVE-2026-22745
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2026-22745
https://spring.io/security/cve-2026-22745
https://www.cve.org/CVERecord?id=CVE-2026-22745
|
| org.springframework:spring-webmvc |
CVE-2026-41841 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41841
https://advisory.echohq.com/cve/CVE-2026-41841
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41841
https://spring.io/security/cve-2026-41841
https://www.cve.org/CVERecord?id=CVE-2026-41841
|
| org.springframework:spring-webmvc |
CVE-2026-41843 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41843
https://advisory.echohq.com/cve/CVE-2026-41843
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41843
https://spring.io/security/cve-2026-41843
https://www.cve.org/CVERecord?id=CVE-2026-41843
|
| org.springframework:spring-webmvc |
CVE-2026-41844 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41844
https://advisory.echohq.com/cve/CVE-2026-41844
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853
https://github.com/spring-projects/spring-framework/commit/7add5243b9db13a9f8e765c8ab8545c8e8fe606b
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41844
https://spring.io/security/cve-2026-41844
https://www.cve.org/CVERecord?id=CVE-2026-41844
|
| org.springframework:spring-webmvc |
CVE-2026-41846 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41846
https://advisory.echohq.com/cve/CVE-2026-41846
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/commit/1829b42b9c45e780c268dd17863d9198d62154d3
https://github.com/spring-projects/spring-framework/commit/e8f10244e3859e8bb5b6be3823c9bbea2c130573
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41846
https://spring.io/security/cve-2026-41846
https://www.cve.org/CVERecord?id=CVE-2026-41846
|
| org.springframework:spring-webmvc |
CVE-2026-41853 |
MEDIUM |
5.3.13 |
7.0.8, 6.2.19 |
https://access.redhat.com/security/cve/CVE-2026-41853
https://advisory.echohq.com/cve/CVE-2026-41853
https://github.com/spring-projects/spring-framework
https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19
https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8
https://nvd.nist.gov/vuln/detail/CVE-2026-41853
https://spring.io/security/cve-2026-41853
https://www.cve.org/CVERecord?id=CVE-2026-41853
|
| org.springframework:spring-webmvc |
CVE-2026-22735 |
LOW |
5.3.13 |
7.0.6, 6.2.17 |
https://access.redhat.com/security/cve/CVE-2026-22735
https://advisory.echohq.com/cve/CVE-2026-22735
https://github.com/advisories/GHSA-6hcq-hmm3-jj3c
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln/detail/CVE-2026-22735
https://spring.io/security/cve-2026-22735
https://www.cve.org/CVERecord?id=CVE-2026-22735
|
| org.springframework:spring-webmvc |
CVE-2026-22741 |
LOW |
5.3.13 |
7.0.7, 6.2.18 |
https://access.redhat.com/security/cve/CVE-2026-22741
https://advisory.echohq.com/cve/CVE-2026-22741
https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title
https://github.com/spring-projects/spring-framework
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1
https://nvd.nist.gov/vuln/detail/CVE-2026-22741
https://spring.io/security/cve-2026-22741
https://www.cve.org/CVERecord?id=CVE-2026-22741
|
| org.thymeleaf:thymeleaf |
CVE-2026-40477 |
CRITICAL |
3.0.11.RELEASE |
3.1.4.RELEASE |
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/security/cve/CVE-2026-40477
https://bugzilla.redhat.com/show_bug.cgi?id=2459344
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-r4v4-5mwr-2fwr
https://nvd.nist.gov/vuln/detail/CVE-2026-40477
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40477.json
https://www.cve.org/CVERecord?id=CVE-2026-40477
|
| org.thymeleaf:thymeleaf |
CVE-2026-40478 |
CRITICAL |
3.0.11.RELEASE |
3.1.4.RELEASE |
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/security/cve/CVE-2026-40478
https://bugzilla.redhat.com/show_bug.cgi?id=2459349
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-xjw8-8c5c-9r79
https://nvd.nist.gov/vuln/detail/CVE-2026-40478
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40478.json
https://www.cve.org/CVERecord?id=CVE-2026-40478
|
| org.thymeleaf:thymeleaf |
CVE-2026-41901 |
CRITICAL |
3.0.11.RELEASE |
3.1.5.RELEASE |
https://access.redhat.com/security/cve/CVE-2026-41901
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-c9ph-gxww-7744
https://nvd.nist.gov/vuln/detail/CVE-2026-41901
https://www.cve.org/CVERecord?id=CVE-2026-41901
|
| org.thymeleaf:thymeleaf-spring5 |
CVE-2021-43466 |
CRITICAL |
3.0.11.RELEASE |
3.0.13.RELEASE |
https://gitee.com/wayne_wwang/wayne_wwang/blob/master/2021/10/31/ruoyi+thymeleaf-rce/index.html
https://github.com/thymeleaf/thymeleaf-spring
https://github.com/thymeleaf/thymeleaf-spring/issues/263#issuecomment-977199524
https://nvd.nist.gov/vuln/detail/CVE-2021-43466
https://security.netapp.com/advisory/ntap-20221014-0001
https://security.netapp.com/advisory/ntap-20221014-0001/
https://vuldb.com/?id.186365
|
| org.thymeleaf:thymeleaf-spring5 |
CVE-2026-40477 |
CRITICAL |
3.0.11.RELEASE |
3.1.4.RELEASE |
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/security/cve/CVE-2026-40477
https://bugzilla.redhat.com/show_bug.cgi?id=2459344
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-r4v4-5mwr-2fwr
https://nvd.nist.gov/vuln/detail/CVE-2026-40477
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40477.json
https://www.cve.org/CVERecord?id=CVE-2026-40477
|
| org.thymeleaf:thymeleaf-spring5 |
CVE-2026-40478 |
CRITICAL |
3.0.11.RELEASE |
3.1.4.RELEASE |
https://access.redhat.com/errata/RHSA-2026:21772
https://access.redhat.com/security/cve/CVE-2026-40478
https://bugzilla.redhat.com/show_bug.cgi?id=2459349
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-xjw8-8c5c-9r79
https://nvd.nist.gov/vuln/detail/CVE-2026-40478
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40478.json
https://www.cve.org/CVERecord?id=CVE-2026-40478
|
| org.thymeleaf:thymeleaf-spring5 |
CVE-2026-41901 |
CRITICAL |
3.0.11.RELEASE |
3.1.5.RELEASE |
https://access.redhat.com/security/cve/CVE-2026-41901
https://github.com/thymeleaf/thymeleaf
https://github.com/thymeleaf/thymeleaf/security/advisories/GHSA-c9ph-gxww-7744
https://nvd.nist.gov/vuln/detail/CVE-2026-41901
https://www.cve.org/CVERecord?id=CVE-2026-41901
|
| org.xmlunit:xmlunit-core |
CVE-2024-31573 |
LOW |
2.7.0 |
2.10.0 |
https://access.redhat.com/security/cve/CVE-2024-31573
https://docs.oracle.com/en/java/javase/22/security/java-api-xml-processing-jaxp-security-guide.html#GUID-E345AA09-801E-4B95-B83D-7F0C452538AA
https://github.com/advisories/GHSA-chfm-68vv-pvw5
https://github.com/xmlunit/xmlunit
https://github.com/xmlunit/xmlunit/commit/b81d48b71dfd2868bdfc30a3e17ff973f32bc15b
https://github.com/xmlunit/xmlunit/issues/264
https://github.com/xmlunit/xmlunit/security/advisories/GHSA-chfm-68vv-pvw5
https://nvd.nist.gov/vuln/detail/CVE-2024-31573
https://www.cve.org/CVERecord?id=CVE-2024-31573
|
| org.yaml:snakeyaml |
CVE-2022-1471 |
HIGH |
1.26 |
2.0 |
http://packetstormsecurity.com/files/175095/PyTorch-Model-Server-Registration-Deserialization-Remote-Code-Execution.html
http://www.openwall.com/lists/oss-security/2023/11/19/1
https://access.redhat.com/errata/RHSA-2022:9058
https://access.redhat.com/security/cve/CVE-2022-1471
https://advisory.echohq.com/cve/CVE-2022-1471
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/5014df1a36f50aca54405bb8433bc99a8847f758
https://bitbucket.org/snakeyaml/snakeyaml/commits/acc44099f5f4af26ff86b4e4e4cc1c874e2dc5c4
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64581479
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64634374
https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in#comment-64876314
https://bitbucket.org/snakeyaml/snakeyaml/wiki/CVE-2022-1471
https://bugzilla.redhat.com/2150009
https://bugzilla.redhat.com/show_bug.cgi?id=2150009
https://confluence.atlassian.com/security/cve-2022-1471-snakeyaml-library-rce-vulnerability-in-multiple-products-1296171009.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1471
https://errata.almalinux.org/8/ALSA-2022-9058.html
https://errata.rockylinux.org/RLSA-2022:9058
https://github.com/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
https://github.com/mbechler/marshalsec
https://groups.google.com/g/kubernetes-security-announce/c/mwrakFaEdnc
https://infosecwriteups.com/%EF%B8%8F-inside-the-160-comment-fight-to-fix-snakeyamls-rce-default-1a20c5ca4d4c
https://linux.oracle.com/cve/CVE-2022-1471.html
https://linux.oracle.com/errata/ELSA-2022-9058-1.html
https://nvd.nist.gov/vuln/detail/CVE-2022-1471
https://security.netapp.com/advisory/ntap-20230818-0015
https://security.netapp.com/advisory/ntap-20230818-0015/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://snyk.io/blog/unsafe-deserialization-snakeyaml-java-cve-2022-1471
https://www.cve.org/CVERecord?id=CVE-2022-1471
https://www.github.com/mbechler/marshalsec/blob/master/marshalsec.pdf?raw=true
|
| org.yaml:snakeyaml |
CVE-2022-25857 |
HIGH |
1.26 |
1.31 |
https://access.redhat.com/errata/RHSA-2022:6820
https://access.redhat.com/security/cve/CVE-2022-25857
https://advisory.echohq.com/cve/CVE-2022-25857
https://bitbucket.org/snakeyaml/snakeyaml/commits/fc300780da21f4bb92c148bc90257201220cf174
https://bitbucket.org/snakeyaml/snakeyaml/issues/525
https://bugzilla.redhat.com/2126789
https://bugzilla.redhat.com/show_bug.cgi?id=2126789
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-25857
https://errata.almalinux.org/8/ALSA-2022-6820.html
https://errata.rockylinux.org/RLSA-2022:6820
https://github.com/advisories/GHSA-3mc7-4q67-w48m
https://github.com/snakeyaml/snakeyaml
https://github.com/snakeyaml/snakeyaml/commit/fc300780da21f4bb92c148bc90257201220cf174
https://linux.oracle.com/cve/CVE-2022-25857.html
https://linux.oracle.com/errata/ELSA-2022-6820.html
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-25857
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://security.snyk.io/vuln/SNYK-JAVA-ORGYAML-2806360
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-25857
|
| org.yaml:snakeyaml |
CVE-2022-38749 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38749
https://advisory.echohq.com/cve/CVE-2022-38749
https://arxiv.org/pdf/2306.05534.pdf
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/525/got-stackoverflowerror-for-many-open
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47024
https://github.com/advisories/GHSA-c4r9-r8fh-9vj2
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38749
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38749
|
| org.yaml:snakeyaml |
CVE-2022-38750 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38750
https://advisory.echohq.com/cve/CVE-2022-38750
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/526/stackoverflow-oss-fuzz-47027
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47027
https://github.com/advisories/GHSA-hhhw-99gj-p3c3
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38750
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38750
|
| org.yaml:snakeyaml |
CVE-2022-38751 |
MEDIUM |
1.26 |
1.31 |
https://access.redhat.com/security/cve/CVE-2022-38751
https://advisory.echohq.com/cve/CVE-2022-38751
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/530/stackoverflow-oss-fuzz-47039
https://bitbucket.org/snakeyaml/snakeyaml/src/master/src/test/java/org/yaml/snakeyaml/issues/issue530/Fuzzy47039Test.java
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47039
https://github.com/advisories/GHSA-98wm-3w3q-mw94
https://lists.debian.org/debian-lts-announce/2022/10/msg00001.html
https://nvd.nist.gov/vuln/detail/CVE-2022-38751
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0010
https://security.netapp.com/advisory/ntap-20240315-0010/
https://ubuntu.com/security/notices/USN-5944-1
https://www.cve.org/CVERecord?id=CVE-2022-38751
|
| org.yaml:snakeyaml |
CVE-2022-38752 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-38752
https://advisory.echohq.com/cve/CVE-2022-38752
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/issues/531/stackoverflow-oss-fuzz-47081
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47081
https://github.com/advisories/GHSA-9w3m-gqgf-c4p9
https://nvd.nist.gov/vuln/detail/CVE-2022-38752
https://security.gentoo.org/glsa/202305-28
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://www.cve.org/CVERecord?id=CVE-2022-38752
|
| org.yaml:snakeyaml |
CVE-2022-41854 |
MEDIUM |
1.26 |
1.32 |
https://access.redhat.com/security/cve/CVE-2022-41854
https://advisory.echohq.com/cve/CVE-2022-41854
https://bitbucket.org/snakeyaml/snakeyaml
https://bitbucket.org/snakeyaml/snakeyaml/commits/e230a1758842beec93d28eddfde568c21774780a
https://bitbucket.org/snakeyaml/snakeyaml/issues/531
https://bitbucket.org/snakeyaml/snakeyaml/issues/543/stackoverflow-oss-fuzz-50355
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355
https://github.com/advisories/GHSA-w37g-rhq8-7m4j
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSPAJ5Y45A4ZDION2KN5RDWLHK4XKY2J/
https://nvd.nist.gov/vuln/detail/CVE-2022-41854
https://security.netapp.com/advisory/ntap-20240315-0009
https://security.netapp.com/advisory/ntap-20240315-0009/
https://security.netapp.com/advisory/ntap-20240621-0006
https://security.netapp.com/advisory/ntap-20240621-0006/
https://www.cve.org/CVERecord?id=CVE-2022-41854
|
| No Misconfigurations found |
|---|