{ "@id": "urn:uuid:b63fb5aa-082e-4d73-97f5-05f67c11aabc", "role": "Document Creator", "author": "https://tuxcare.com", "version": 38, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-30T15:44:00.110412+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2017-12615 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2017-12615" }, "action_statement": "Vulnerability CVE-2017-12615 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-11784 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-11784" }, "action_statement": "Vulnerability CVE-2018-11784 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-1304 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-1304" }, "action_statement": "Vulnerability CVE-2018-1304 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-1305 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-1305" }, "action_statement": "Vulnerability CVE-2018-1305 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-1336 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-1336" }, "action_statement": "Vulnerability CVE-2018-1336 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-8014 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-8014" }, "action_statement": "Vulnerability CVE-2018-8014 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2018-8034 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-8034" }, "action_statement": "Vulnerability CVE-2018-8034 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T15:44:00.110412+00:00", "status_notes": "Vulnerability CVE-2018-8037 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2018-8037" }, "action_statement": "Vulnerability CVE-2018-8037 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-0199 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-0199" }, "action_statement": "Vulnerability CVE-2019-0199 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-0232 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-0232" }, "action_statement": "Vulnerability CVE-2019-0232 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T15:44:00.110412+00:00", "status_notes": "Vulnerability CVE-2019-10072 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-10072" }, "action_statement": "Vulnerability CVE-2019-10072 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-12418 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-12418" }, "action_statement": "Vulnerability CVE-2019-12418 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2019-17563 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2019-17563" }, "action_statement": "Vulnerability CVE-2019-17563 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-11996 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2020-11996" }, "action_statement": "Vulnerability CVE-2020-11996 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-13935 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2020-13935" }, "action_statement": "Vulnerability CVE-2020-13935 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2020-1935 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2020-1935" }, "action_statement": "Vulnerability CVE-2020-1935 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2020-1938 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2020-1938" }, "action_statement": "Vulnerability CVE-2020-1938 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2020-9484 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2020-9484" }, "action_statement": "Vulnerability CVE-2020-9484 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-24122 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2021-24122" }, "action_statement": "Vulnerability CVE-2021-24122 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T15:44:00.110412+00:00", "status_notes": "Vulnerability CVE-2021-25122 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2021-25122" }, "action_statement": "Vulnerability CVE-2021-25122 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2021-25329 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2021-25329" }, "action_statement": "Vulnerability CVE-2021-25329 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T21:12:12.887949+00:00", "status_notes": "Vulnerability CVE-2022-42252 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2022-42252" }, "action_statement": "Vulnerability CVE-2022-42252 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T21:04:11.478044+00:00", "status_notes": "Vulnerability CVE-2022-45143 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2022-45143" }, "action_statement": "Vulnerability CVE-2022-45143 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T21:11:34.688190+00:00", "status_notes": "Vulnerability CVE-2023-24998 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2023-24998" }, "action_statement": "Vulnerability CVE-2023-24998 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-30T00:51:00.063334+00:00", "status_notes": "Vulnerability CVE-2023-41080 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. not_affected \u2014 CVE-2023-41080 (open redirect via protocol-relative URLs in FORM authentication) is NOT present in target version 10.1.42. The fix was already included in the upstream Apache Tomcat 10.1.42 release that TuxCare onboarded. The defense code (lines 766-769 in FormAuthenticator.java) strips consecutive leading slashes from saved request URLs, preventing protocol-relative redirect interpretation (e....", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-41080" }, "impact_statement": "not_affected \u2014 CVE-2023-41080 (open redirect via protocol-relative URLs in FORM authentication) is NOT present in target version 10.1.42. The fix was already included in the upstream Apache Tomcat 10.1.42 release that TuxCare onboarded. The defense code (lines 766-769 in FormAuthenticator.java) strips consecutive leading slashes from saved request URLs, preventing protocol-relative redirect interpretation (e...." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:22:18.734162+00:00", "status_notes": "Vulnerability CVE-2023-42795 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. not_affected \u2014 CVE-2023-42795 is NOT present in the target. The vulnerability involves incomplete cleanup during recycling of internal objects, which could leak information between requests. The upstream Apache Tomcat project fixed this in version 10.1.14 (released October 2023) by adding robust error handling to ensure all recycling steps complete even if exceptions occur. The target version 10.1.42 (release...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42795" }, "impact_statement": "not_affected \u2014 CVE-2023-42795 is NOT present in the target. The vulnerability involves incomplete cleanup during recycling of internal objects, which could leak information between requests. The upstream Apache Tomcat project fixed this in version 10.1.14 (released October 2023) by adding robust error handling to ensure all recycling steps complete even if exceptions occur. The target version 10.1.42 (release..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T19:10:05.488784+00:00", "status_notes": "Vulnerability CVE-2023-45648 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. not_affected \u2014 Apache Tomcat 10.1.42 is not affected by CVE-2023-45648. The vulnerability involves improper parsing of HTTP trailer headers that could lead to request smuggling. The fix, which validates that trailer header names contain only token characters and values do not contain control characters (except HT/tab), was already present in the upstream Apache Tomcat 10.1.42 release when TuxCare onboarded it...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-45648" }, "impact_statement": "not_affected \u2014 Apache Tomcat 10.1.42 is not affected by CVE-2023-45648. The vulnerability involves improper parsing of HTTP trailer headers that could lead to request smuggling. The fix, which validates that trailer header names contain only token characters and values do not contain control characters (except HT/tab), was already present in the upstream Apache Tomcat 10.1.42 release when TuxCare onboarded it..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2023-46589 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2023-46589" }, "action_statement": "Vulnerability CVE-2023-46589 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-21733 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-21733" }, "action_statement": "Vulnerability CVE-2024-21733 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-23672 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. Tomcat 10.1.42 is not vulnerable because CVE-2024-23672 is fixed in 10.1.19 and affects only 10.1.0-M1 through 10.1.18, and 10.1.42 is later than 10.1.19.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-23672" }, "impact_statement": "Tomcat 10.1.42 is not vulnerable because CVE-2024-23672 is fixed in 10.1.19 and affects only 10.1.0-M1 through 10.1.18, and 10.1.42 is later than 10.1.19." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-24549 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. 10.1.42 is not vulnerable. The issue is fixed in 10.1.19, and 10.1.42 is later than 10.1.19, so this version already includes the fix.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-24549" }, "impact_statement": "10.1.42 is not vulnerable. The issue is fixed in 10.1.19, and 10.1.42 is later than 10.1.19, so this version already includes the fix." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-34750 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-34750" }, "action_statement": "Vulnerability CVE-2024-34750 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-38286 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-38286" }, "action_statement": "Vulnerability CVE-2024-38286 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:11:36.374923+00:00", "status_notes": "Vulnerability CVE-2024-50379 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-50379" }, "action_statement": "Vulnerability CVE-2024-50379 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-56337 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-56337" }, "action_statement": "Vulnerability CVE-2024-56337 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2025-24813 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-24813" }, "action_statement": "Vulnerability CVE-2025-24813 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2025-31650 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-31650" }, "action_statement": "Vulnerability CVE-2025-31650 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2025-31651 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-31651" }, "action_statement": "Vulnerability CVE-2025-31651 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2025-46701 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-46701" }, "action_statement": "Vulnerability CVE-2025-46701 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48988 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. 10.1.42 is the first fixed release in 10.1.x. The fix is already included in 10.1.42.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-48988" }, "impact_statement": "10.1.42 is the first fixed release in 10.1.x. The fix is already included in 10.1.42." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2025-49124 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-49124" }, "action_statement": "Vulnerability CVE-2025-49124 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49125 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. 10.1.42 is the first fixed release in 10.1.x. The fix is already included in 10.1.42.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-49125" }, "impact_statement": "10.1.42 is the first fixed release in 10.1.x. The fix is already included in 10.1.42." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2025-52434 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-52434" }, "action_statement": "Vulnerability CVE-2025-52434 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-28T20:40:53.651459+00:00", "status_notes": "Vulnerability CVE-2025-55668 does not affect version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket. not_affected \u2014 The target Apache Tomcat 10.1.42-tuxcare.11 is NOT AFFECTED by CVE-2025-55668. The vulnerability (session fixation via RewriteValve failing to encode session IDs in redirect URLs) was fixed in upstream commit 8621e4c6ba by remm@apache.org on June 3, 2025. This fix was already present in Apache Tomcat 10.1.42 when TuxCare onboarded it on March 11, 2026 (commit 39e58930c6). All three protective c...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-55668" }, "impact_statement": "not_affected \u2014 The target Apache Tomcat 10.1.42-tuxcare.11 is NOT AFFECTED by CVE-2025-55668. The vulnerability (session fixation via RewriteValve failing to encode session IDs in redirect URLs) was fixed in upstream commit 8621e4c6ba by remm@apache.org on June 3, 2025. This fix was already present in Apache Tomcat 10.1.42 when TuxCare onboarded it on March 11, 2026 (commit 39e58930c6). All three protective c..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-55752" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-66614 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-66614" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.10.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.10." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24880 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-24880" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-25854" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34483 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-34483" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34487 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-34487" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.10.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.10." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41293 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.8.", "vulnerability": { "name": "CVE-2026-41293" }, "action_statement": "Vulnerability CVE-2026-41293 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.8." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42498 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-42498" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43512 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9.", "vulnerability": { "name": "CVE-2026-43512" }, "action_statement": "Vulnerability CVE-2026-43512 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43515 is fixed in version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43515" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-10-22T15:11:53.681251+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.11.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.11." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.42-tuxcare.7" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 10.1.42-tuxcare.7 of org.apache.tomcat.embed:tomcat-embed-websocket, and is fixed in 10.1.42-tuxcare.9." } ] }