{ "@id": "urn:uuid:6c1b776d-fd98-4e20-86f8-e3f108984614", "role": "Document Creator", "author": "https://tuxcare.com", "version": 2, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-30T19:16:00.156571+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2016-5388 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2016-5388" }, "action_statement": "Vulnerability CVE-2016-5388 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2016-8735 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2016-8735" }, "action_statement": "Vulnerability CVE-2016-8735 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2017-12616 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-12616" }, "action_statement": "Vulnerability CVE-2017-12616 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2019-0199" }, "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2020-13934 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-13934" }, "impact_statement": "CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2020-13943 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina. Version 9.0.75 is not vulnerable. Summary: CVE-2020-13943 is NOT present in this Tomcat 9.0.75 repository. The fix that moves the concurrent stream check from headersStart() to headersEnd() has been applied. The concurrent stream limit check now occurs in headersEnd() after all headers have been fully received and validated, preventing the header pollution vulnerability.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-13943" }, "impact_statement": "Version 9.0.75 is not vulnerable. Summary: CVE-2020-13943 is NOT present in this Tomcat 9.0.75 repository. The fix that moves the concurrent stream check from headersStart() to headersEnd() has been applied. The concurrent stream limit check now occurs in headersEnd() after all headers have been fully received and validated, preventing the header pollution vulnerability." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2020-17527 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2020-17527" }, "action_statement": "Vulnerability CVE-2020-17527 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2020-9484 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina. Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9484" }, "impact_statement": "Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2021-25122" }, "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2022-42252 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2022-42252" }, "action_statement": "Vulnerability CVE-2022-42252 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2022-45143 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2022-45143" }, "action_statement": "Vulnerability CVE-2022-45143 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-24998 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-24998" }, "action_statement": "Vulnerability CVE-2023-24998 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-28708 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 Apache Tomcat 9.0.75 is NOT AFFECTED by CVE-2023-28708. The vulnerability (missing Secure attribute on session cookies when RemoteIpFilter processes X-Forwarded-Proto: https) was fixed in upstream Apache Tomcat release 9.0.72 (February 2023) via commit 3b51230764 by lihan@apache.org. This fix was already present when TuxCare onboarded version 9.0.75. All three components of the fix are present:...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-28708" }, "impact_statement": "not_affected \u2014 Apache Tomcat 9.0.75 is NOT AFFECTED by CVE-2023-28708. The vulnerability (missing Secure attribute on session cookies when RemoteIpFilter processes X-Forwarded-Proto: https) was fixed in upstream Apache Tomcat release 9.0.72 (February 2023) via commit 3b51230764 by lihan@apache.org. This fix was already present when TuxCare onboarded version 9.0.75. All three components of the fix are present:..." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-41080 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-41080" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-42794 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-42794" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-42795 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-42795" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-44487 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-44487" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-45648 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-45648" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2023-46589 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-46589" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-21733" }, "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-24549 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-24549" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-34750 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-34750" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-38286 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-38286" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-50379 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-50379" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2024-52316 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-52316" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:16:00.156571+00:00", "status_notes": "Vulnerability CVE-2024-56337 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-56337" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-24813 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-24813" } }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-31650 does not affect version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 Apache Tomcat version 9.0.75 is not affected by CVE-2025-31650. The vulnerability requires HTTP/2 PRIORITY_UPDATE frame handling code (RFC 9218) that was introduced in version 9.0.76. Version 9.0.75 does not implement PRIORITY_UPDATE frames and therefore cannot exhibit the memory leak vulnerability.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2025-31650" }, "impact_statement": "not_affected \u2014 Apache Tomcat version 9.0.75 is not affected by CVE-2025-31650. The vulnerability requires HTTP/2 PRIORITY_UPDATE frame handling code (RFC 9218) that was introduced in version 9.0.76. Version 9.0.75 does not implement PRIORITY_UPDATE frames and therefore cannot exhibit the memory leak vulnerability." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-31651 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-31651" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-48988" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-49124" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-49125 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-49125" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-52434 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-52434" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-55752 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55752" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2025-66614 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-66614" }, "action_statement": "Vulnerability CVE-2025-66614 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-24733 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-24733" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-24880 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-24880" }, "action_statement": "Vulnerability CVE-2026-24880 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-25854" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:16:00.156571+00:00", "status_notes": "Vulnerability CVE-2026-34483 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-34483" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-41293" }, "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-42498" }, "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:16:00.156571+00:00", "status_notes": "Vulnerability CVE-2026-43512 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43512" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-53434 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-53434" }, "action_statement": "Vulnerability CVE-2026-53434 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:16:00.156571+00:00", "status_notes": "Vulnerability CVE-2026-65905 is fixed in version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-65905" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.75-tuxcare.7" } } ], "timestamp": "2026-10-30T19:15:38.891976+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.75-tuxcare.7 of org.apache.tomcat:tomcat-catalina." } ] }