{ "@id": "urn:uuid:3dc065c6-8cda-42ed-9daf-0acc460ab618", "role": "Document Creator", "author": "https://tuxcare.com", "version": 23, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-30T22:36:28.853898+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2019-0199" }, "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-30T14:57:45.485772+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2020-13934 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2020-13934" }, "action_statement": "Vulnerability CVE-2020-13934 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2020-13943 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2020-13943" }, "action_statement": "Vulnerability CVE-2020-13943 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2020-17527 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2020-17527" }, "action_statement": "Vulnerability CVE-2020-17527 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2020-9484 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2020-9484" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-30T15:44:00.110412+00:00", "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2021-25122" }, "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2022-42252 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2022-42252" }, "action_statement": "Vulnerability CVE-2022-42252 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2022-45143 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha. Apache Tomcat 9.0.24 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that does not exist in version 9.0.24. JsonErrorReportValve was introduced in Tomcat 9.0.40. Version 9.0.24 only contains ErrorReportValve, which produces HTML error pages and properly escapes user-controlled data using Escape.htmlElementContent(). The CVE's stated affected range (9.0.40 to 9.0.68) accurately reflects when the vulnerable component was introduced.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-45143" }, "impact_statement": "Apache Tomcat 9.0.24 is not affected by CVE-2022-45143. The vulnerability concerns JsonErrorReportValve, a component that does not exist in version 9.0.24. JsonErrorReportValve was introduced in Tomcat 9.0.40. Version 9.0.24 only contains ErrorReportValve, which produces HTML error pages and properly escapes user-controlled data using Escape.htmlElementContent(). The CVE's stated affected range (9.0.40 to 9.0.68) accurately reflects when the vulnerable component was introduced." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:41:00.085219+00:00", "status_notes": "Vulnerability CVE-2023-24998 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-24998" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2023-28708 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-28708" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:41:00.085219+00:00", "status_notes": "Vulnerability CVE-2023-41080 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-41080" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T18:45:57.071664+00:00", "status_notes": "Vulnerability CVE-2023-42794 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha. not_affected \u2014 Target version 9.0.24 is NOT AFFECTED by CVE-2023-42794. The vulnerability was introduced in versions 9.0.70-9.0.80 when an \"in progress refactoring\" removed the finalize() cleanup method from DiskFileItem.java. Version 9.0.24 predates this refactoring and still contains the original finalize() method (lines 549-558) that prevents temporary uploaded files from persisting indefinitely. The CVE a...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42794" }, "impact_statement": "not_affected \u2014 Target version 9.0.24 is NOT AFFECTED by CVE-2023-42794. The vulnerability was introduced in versions 9.0.70-9.0.80 when an \"in progress refactoring\" removed the finalize() cleanup method from DiskFileItem.java. Version 9.0.24 predates this refactoring and still contains the original finalize() method (lines 549-558) that prevents temporary uploaded files from persisting indefinitely. The CVE a..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2023-42795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-42795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:41:00.085219+00:00", "status_notes": "Vulnerability CVE-2023-44487 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-44487" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2023-45648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-45648" }, "action_statement": "Vulnerability CVE-2023-45648 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2023-46589" }, "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-21733" }, "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2024-24549 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-24549" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2024-34750 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-34750" }, "action_statement": "Vulnerability CVE-2024-34750 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2024-38286 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-38286" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2024-50379 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-50379" }, "action_statement": "Vulnerability CVE-2024-50379 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2024-52316 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-52316" }, "action_statement": "Vulnerability CVE-2024-52316 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2024-56337 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2024-56337" }, "action_statement": "Vulnerability CVE-2024-56337 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-24813 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-24813" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2025-31650 does not affect version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha. Apache Tomcat 9.0.24 is not affected by CVE-2025-31650. The vulnerability affects HTTP/2 extensible priorities (RFC 9218) support, which was not implemented in this version. The target lacks all vulnerable code paths: PRIORITY_UPDATE frame handling, Priority.parsePriority() method, and priority HTTP header processing. The CVE's affected version range starts at 9.0.76, consistent with RFC 9218 support being added after 9.0.24.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-31650" }, "impact_statement": "Apache Tomcat 9.0.24 is not affected by CVE-2025-31650. The vulnerability affects HTTP/2 extensible priorities (RFC 9218) support, which was not implemented in this version. The target lacks all vulnerable code paths: PRIORITY_UPDATE frame handling, Priority.parsePriority() method, and priority HTTP header processing. The CVE's affected version range starts at 9.0.76, consistent with RFC 9218 support being added after 9.0.24." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2025-31651 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-31651" }, "action_statement": "Vulnerability CVE-2025-31651 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-48988" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-49124" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-49125 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-49125" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-52434 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-52434" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:41:00.085219+00:00", "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-55752" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T18:11:01.360398+00:00", "status_notes": "Vulnerability CVE-2025-55754 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-55754" }, "action_statement": "Vulnerability CVE-2025-55754 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2025-66614 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2025-66614" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2026-24733 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-24733" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T21:58:36.804623+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-24880 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-24880" }, "action_statement": "Vulnerability CVE-2026-24880 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-25854" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:40:00.126735+00:00", "status_notes": "Vulnerability CVE-2026-29146 is fixed in version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-29146" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2026-34483 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-34483" }, "action_statement": "Vulnerability CVE-2026-34483 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-30T22:36:28.853898+00:00", "status_notes": "Vulnerability CVE-2026-34486 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-34486" }, "action_statement": "Vulnerability CVE-2026-34486 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-34487 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-34487" }, "action_statement": "Vulnerability CVE-2026-34487 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-41293" }, "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-42498" }, "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-43512" }, "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-28T21:58:36.804623+00:00", "status_notes": "Vulnerability CVE-2026-53434 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-53434" }, "action_statement": "Vulnerability CVE-2026-53434 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha@9.0.24-tuxcare.1" } } ], "timestamp": "2026-10-21T09:35:11.513953+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.24-tuxcare.1 of org.apache.tomcat:tomcat-catalina-ha." } ] }