{ "@id": "urn:uuid:e690e8b3-cf08-4347-bee6-accdb68db400", "role": "Document Creator", "author": "https://tuxcare.com", "version": 33, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-30T14:49:00.106665+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-5388 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2016-5388" }, "action_statement": "Vulnerability CVE-2016-5388 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-8735 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2016-8735" }, "action_statement": "Vulnerability CVE-2016-8735 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2017-12616 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-12616" }, "action_statement": "Vulnerability CVE-2017-12616 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-9484 does not affect version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina. Apache Tomcat 9.0.83 is not affected by CVE-2020-9484. The vulnerability (path traversal in session ID allowing arbitrary file deserialization) was fixed by upstream Apache in commit 3aa8f28db7e (Mark Thomas, May 2020) before version 9.0.83 was released. The fix validates that session file paths remain within the storage directory using canonical path comparison. CVE-2020-9484 affected versions 9.0.0.M1 to 9.0.34; version 9.0.83 was released later with the fix already present in the upstream codebase.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9484" }, "impact_statement": "Apache Tomcat 9.0.83 is not affected by CVE-2020-9484. The vulnerability (path traversal in session ID allowing arbitrary file deserialization) was fixed by upstream Apache in commit 3aa8f28db7e (Mark Thomas, May 2020) before version 9.0.83 was released. The fix validates that session file paths remain within the storage directory using canonical path comparison. CVE-2020-9484 affected versions 9.0.0.M1 to 9.0.34; version 9.0.83 was released later with the fix already present in the upstream codebase." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-45143 does not affect version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina. Apache Tomcat 9.0.83 is not affected by CVE-2022-45143. The upstream Apache fix (commit b336f4e58893ea35114f1e4a415657f723b1298e by Mark Thomas) was already present in the upstream 9.0.83 release, which serves as the base for this TuxCare branch. The JsonErrorReportValve properly escapes type, message, and description fields using JSONFilter.escape() before embedding them in JSON output, preventing the JSON injection vulnerability. The CVE affects versions 9.0.40 to 9.0.68; this version (9.0.83) is outside the affected range.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2022-45143" }, "impact_statement": "Apache Tomcat 9.0.83 is not affected by CVE-2022-45143. The upstream Apache fix (commit b336f4e58893ea35114f1e4a415657f723b1298e by Mark Thomas) was already present in the upstream 9.0.83 release, which serves as the base for this TuxCare branch. The JsonErrorReportValve properly escapes type, message, and description fields using JSONFilter.escape() before embedding them in JSON output, preventing the JSON injection vulnerability. The CVE affects versions 9.0.40 to 9.0.68; this version (9.0.83) is outside the affected range." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T21:11:34.688190+00:00", "status_notes": "Vulnerability CVE-2023-24998 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-24998" }, "action_statement": "Vulnerability CVE-2023-24998 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-30T01:27:27.560207+00:00", "status_notes": "Vulnerability CVE-2023-28708 does not affect version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 Target version 9.0.83 is NOT AFFECTED. The vulnerability (CVE-2023-28708) affected Tomcat 9.0.0-M1 to 9.0.71. The fix (commit 3b51230764, Bug 66471) was authored by upstream Apache developer lihan@apache.org and shipped in upstream Tomcat releases after 9.0.71. Version 9.0.83 already contains this upstream fix - the vulnerable pattern (RemoteIpFilter storing secure flag in local wrapper field i...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-28708" }, "impact_statement": "not_affected \u2014 Target version 9.0.83 is NOT AFFECTED. The vulnerability (CVE-2023-28708) affected Tomcat 9.0.0-M1 to 9.0.71. The fix (commit 3b51230764, Bug 66471) was authored by upstream Apache developer lihan@apache.org and shipped in upstream Tomcat releases after 9.0.71. Version 9.0.83 already contains this upstream fix - the vulnerable pattern (RemoteIpFilter storing secure flag in local wrapper field i..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-30T00:54:00.090269+00:00", "status_notes": "Vulnerability CVE-2023-41080 does not affect version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 CVE-2023-41080 (open redirect in FORM authentication) is NOT present in the target. The vulnerability was already fixed in the upstream Apache Tomcat 9.0.83 release before TuxCare onboarded this version. The fix commit 77c0ce2d16 by Mark Thomas (markt@apache.org) was applied on 2023-08-22, before the 9.0.83 release tag on 2023-11-09. The fix is present at FormAuthenticator.java:761-764, which s...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-41080" }, "impact_statement": "not_affected \u2014 CVE-2023-41080 (open redirect in FORM authentication) is NOT present in the target. The vulnerability was already fixed in the upstream Apache Tomcat 9.0.83 release before TuxCare onboarded this version. The fix commit 77c0ce2d16 by Mark Thomas (markt@apache.org) was applied on 2023-08-22, before the 9.0.83 release tag on 2023-11-09. The fix is present at FormAuthenticator.java:761-764, which s..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T18:26:26.333782+00:00", "status_notes": "Vulnerability CVE-2023-42795 does not affect version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina. not_affected \u2014 CVE-2023-42795 fix is already present in the target repository. The vulnerability addresses incomplete cleanup during object recycling that could leak information between requests. The fix, authored by Mark Thomas (markt@apache.org) in upstream commit 44d05d75d696ca10ce251e4e370511e38f20ae75, was included in Apache Tomcat 9.0.81 and is present in the target's base version 9.0.83. All four affec...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42795" }, "impact_statement": "not_affected \u2014 CVE-2023-42795 fix is already present in the target repository. The vulnerability addresses incomplete cleanup during object recycling that could leak information between requests. The fix, authored by Mark Thomas (markt@apache.org) in upstream commit 44d05d75d696ca10ce251e4e370511e38f20ae75, was included in Apache Tomcat 9.0.81 and is present in the target's base version 9.0.83. All four affec..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2023-46589" }, "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-50379 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-50379" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-52316 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2024-52316" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-56337 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4.", "vulnerability": { "name": "CVE-2024-56337" }, "action_statement": "Vulnerability CVE-2024-56337 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-24813 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-24813" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-31651 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4.", "vulnerability": { "name": "CVE-2025-31651" }, "action_statement": "Vulnerability CVE-2025-31651 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-48988" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-49124" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49125 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-49125" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55752 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55752" }, "action_statement": "Vulnerability CVE-2025-55752 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-10-22T14:18:08.466710+00:00", "status_notes": "Vulnerability CVE-2026-25854 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.6.", "vulnerability": { "name": "CVE-2026-25854" }, "action_statement": "Vulnerability CVE-2026-25854 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34483 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4.", "vulnerability": { "name": "CVE-2026-34483" }, "action_statement": "Vulnerability CVE-2026-34483 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina, and is fixed in 9.0.83-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-42498" }, "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43512" }, "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.83-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.83-tuxcare.2 of org.apache.tomcat:tomcat-catalina." } ] }