{ "@id": "urn:uuid:c658ffa1-9f5b-4923-bea4-436f9f2ed33e", "role": "Document Creator", "author": "https://tuxcare.com", "version": 31, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-30T14:49:00.106665+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2008-1947 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2008-1947" }, "action_statement": "Vulnerability CVE-2008-1947 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2014-0095 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2014-0095" }, "action_statement": "Vulnerability CVE-2014-0095 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2017-12615 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2017-12615" }, "action_statement": "Vulnerability CVE-2017-12615 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2017-5651 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2017-5651" }, "action_statement": "Vulnerability CVE-2017-5651 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2018-11784 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-11784" }, "action_statement": "Vulnerability CVE-2018-11784 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2018-1304 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-1304" }, "action_statement": "Vulnerability CVE-2018-1304 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2018-1305 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-1305" }, "action_statement": "Vulnerability CVE-2018-1305 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2018-1336 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-1336" }, "action_statement": "Vulnerability CVE-2018-1336 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2018-8014 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-8014" }, "action_statement": "Vulnerability CVE-2018-8014 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2018-8034 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-8034" }, "action_statement": "Vulnerability CVE-2018-8034 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T00:51:30.888148+00:00", "status_notes": "Vulnerability CVE-2018-8037 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2018-8037" }, "action_statement": "Vulnerability CVE-2018-8037 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-0199" }, "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2019-0232 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-0232" }, "action_statement": "Vulnerability CVE-2019-0232 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2019-10072 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-10072" }, "action_statement": "Vulnerability CVE-2019-10072 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-12418 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-12418" }, "action_statement": "Vulnerability CVE-2019-12418 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2019-17563 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-17563" }, "action_statement": "Vulnerability CVE-2019-17563 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2019-17569 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2019-17569" }, "action_statement": "Vulnerability CVE-2019-17569 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-11996 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2020-11996" }, "action_statement": "Vulnerability CVE-2020-11996 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-1935 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2020-1935" }, "action_statement": "Vulnerability CVE-2020-1935 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-1938 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2020-1938" }, "action_statement": "Vulnerability CVE-2020-1938 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-9484 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. already_fixed \u2014 CVE-2020-9484 TOCTOU vulnerability in FileStore session persistence has been fixed. The current code (commit 1385c624b4, January 2022) properly resolves the canonical file path once, validates it against the storage directory, and returns the canonical file object, eliminating the time-of-check-time-of-use window that allowed path traversal attacks.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9484" }, "impact_statement": "already_fixed \u2014 CVE-2020-9484 TOCTOU vulnerability in FileStore session persistence has been fixed. The current code (commit 1385c624b4, January 2022) properly resolves the canonical file path once, validates it against the storage directory, and returns the canonical file object, eliminating the time-of-check-time-of-use window that allowed path traversal attacks." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-24122 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. not_affected \u2014 CVE-2021-24122 is NOT present in Apache Tomcat 9.0.100. The vulnerability (JSP source code disclosure via path confusion using the `:` character on Windows NTFS) was fixed by upstream Apache in commit 935fc5582d (Nov 6, 2020) authored by Mark Thomas (markt@apache.org). This fix was already included in Tomcat 9.0.100 when TuxCare began maintaining this version. The fix adds validation in Abstrac...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-24122" }, "impact_statement": "not_affected \u2014 CVE-2021-24122 is NOT present in Apache Tomcat 9.0.100. The vulnerability (JSP source code disclosure via path confusion using the `:` character on Windows NTFS) was fixed by upstream Apache in commit 935fc5582d (Nov 6, 2020) authored by Mark Thomas (markt@apache.org). This fix was already included in Tomcat 9.0.100 when TuxCare began maintaining this version. The fix adds validation in Abstrac..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2021-25122" }, "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-25329 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2021-25329" }, "action_statement": "Vulnerability CVE-2021-25329 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T21:12:12.887949+00:00", "status_notes": "Vulnerability CVE-2022-42252 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2022-42252" }, "action_statement": "Vulnerability CVE-2022-42252 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2022-45143" }, "action_statement": "Vulnerability CVE-2022-45143 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T21:11:34.688190+00:00", "status_notes": "Vulnerability CVE-2023-24998 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2023-24998" }, "action_statement": "Vulnerability CVE-2023-24998 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T01:46:20.750358+00:00", "status_notes": "Vulnerability CVE-2023-28709 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2023-28709" }, "action_statement": "Vulnerability CVE-2023-28709 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2023-34981 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2023-34981" }, "action_statement": "Vulnerability CVE-2023-34981 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-30T00:50:04.588656+00:00", "status_notes": "Vulnerability CVE-2023-41080 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. not_affected \u2014 CVE-2023-41080 (Open Redirect in FORM authentication) does NOT affect Tomcat 9.0.100. The upstream fix by Mark Thomas (markt@apache.org, commit 77c0ce2d1..., August 22, 2023) was already present in Apache Tomcat 9.0.100 before TuxCare onboarded it. The fix strips extra leading slashes from redirect URLs in FormAuthenticator.savedRequestURL() (lines 766-769), preventing protocol-relative URL red...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-41080" }, "impact_statement": "not_affected \u2014 CVE-2023-41080 (Open Redirect in FORM authentication) does NOT affect Tomcat 9.0.100. The upstream fix by Mark Thomas (markt@apache.org, commit 77c0ce2d1..., August 22, 2023) was already present in Apache Tomcat 9.0.100 before TuxCare onboarded it. The fix strips extra leading slashes from redirect URLs in FormAuthenticator.savedRequestURL() (lines 766-769), preventing protocol-relative URL red..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:23:53.811682+00:00", "status_notes": "Vulnerability CVE-2023-42795 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. not_affected \u2014 CVE-2023-42795 fix was already present in upstream Apache Tomcat 9.0.100 release. The vulnerability affects versions 9.0.0-M1 through 9.0.80; the fix shipped in 9.0.81 onwards per upstream. Target version 9.0.100 already contains commit 44d05d75d6 by markt@apache.org which wraps all vulnerable recycle() cleanup operations in try-catch blocks to prevent incomplete cleanup when errors occur. No T...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42795" }, "impact_statement": "not_affected \u2014 CVE-2023-42795 fix was already present in upstream Apache Tomcat 9.0.100 release. The vulnerability affects versions 9.0.0-M1 through 9.0.80; the fix shipped in 9.0.81 onwards per upstream. Target version 9.0.100 already contains commit 44d05d75d6 by markt@apache.org which wraps all vulnerable recycle() cleanup operations in try-catch blocks to prevent incomplete cleanup when errors occur. No T..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2023-45648 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. not_affected \u2014 CVE-2023-45648 is not present in Tomcat 9.0.100. The vulnerability (improper parsing of HTTP trailer headers in chunked transfer encoding requests, enabling request smuggling) was fixed in upstream Apache Tomcat through architectural refactoring that introduced the HttpHeaderParser class with proper validation of trailer header names and values. This upstream fix was already present in the 9.0....", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-45648" }, "impact_statement": "not_affected \u2014 CVE-2023-45648 is not present in Tomcat 9.0.100. The vulnerability (improper parsing of HTTP trailer headers in chunked transfer encoding requests, enabling request smuggling) was fixed in upstream Apache Tomcat through architectural refactoring that introduced the HttpHeaderParser class with proper validation of trailer header names and values. This upstream fix was already present in the 9.0...." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2023-46589" }, "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-21733" }, "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-24549 does not affect version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core. CVE-2024-24549 affects Tomcat 9.0.x up to 9.0.82; fixed in 9.0.83+. Target 9.0.100 already contains the fix, so this version is not affected.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-24549" }, "impact_statement": "CVE-2024-24549 affects Tomcat 9.0.x up to 9.0.82; fixed in 9.0.83+. Target 9.0.100 already contains the fix, so this version is not affected." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-34750 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-34750" }, "action_statement": "Vulnerability CVE-2024-34750 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-38286 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-38286" }, "action_statement": "Vulnerability CVE-2024-38286 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:11:36.374923+00:00", "status_notes": "Vulnerability CVE-2024-50379 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-50379" }, "action_statement": "Vulnerability CVE-2024-50379 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2024-52317 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-52317" }, "action_statement": "Vulnerability CVE-2024-52317 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-56337 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2024-56337" }, "action_statement": "Vulnerability CVE-2024-56337 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2025-24813 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-24813" }, "action_statement": "Vulnerability CVE-2025-24813 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-31650 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-31650" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-31651 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-31651" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-48988" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-49124" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49125 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-49125" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52434 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-52434" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-55752" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-66614 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2025-66614" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24880 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-24880" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-25854" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability CVE-2026-29129 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-29129" }, "action_statement": "Vulnerability CVE-2026-29129 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-32990" }, "action_statement": "Vulnerability CVE-2026-32990 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34483 is fixed in version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-34483" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34487 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-34487" }, "action_statement": "Vulnerability CVE-2026-34487 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-41293" }, "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-42498" }, "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-43512" }, "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T00:29:56.875680+00:00", "status_notes": "Vulnerability CVE-2026-65637 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-65637" }, "action_statement": "Vulnerability CVE-2026-65637 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.100-tuxcare.6 of org.apache.tomcat.embed:tomcat-embed-core." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.100-tuxcare.6" } } ], "timestamp": "2026-10-29T07:42:31.773838+00:00", "status_notes": "Vulnerability GHSA-r53m-pfr5-7v87 is a false positive for org.apache.tomcat.embed:tomcat-embed-core 9.0.100-tuxcare.6.", "vulnerability": { "name": "GHSA-r53m-pfr5-7v87" }, "impact_statement": "The vulnerability has been withdrawn." } ] }