sz-lk-bi-widget-app.tar (alt cpe:/o:alt:spcontainer:10.2.2) - Trivy Report - 2026-10-15 10:10:40.826692527 +0000 UTC m=+2.460541336

alt
No Vulnerabilities found
No Misconfigurations found
jar
Package	Vulnerability ID	Severity	Installed Version	Fixed Version	Links
ch.qos.logback:logback-core	CVE-2026-10532	LOW	1.5.19	1.5.34	https://advisory.echohq.com/cve/CVE-2026-10532 https://github.com/qos-ch/logback https://github.com/qos-ch/logback/releases/tag/v_1.5.34 https://logback.qos.ch/news.html#1.5.34 https://nvd.nist.gov/vuln/detail/CVE-2026-10532
ch.qos.logback:logback-core	CVE-2026-1225	LOW	1.5.19	1.5.25	https://access.redhat.com/security/cve/CVE-2026-1225 https://advisory.echohq.com/cve/CVE-2026-1225 https://github.com/advisories/GHSA-qqpg-mvqg-649v https://github.com/qos-ch/logback https://github.com/qos-ch/logback/commit/1f97ae1844b1be8486e4e9cade98d7123d3eded5 https://github.com/qos-ch/logback/issues/997 https://logback.qos.ch/news.html#1.5.25 https://nvd.nist.gov/vuln/detail/CVE-2026-1225 https://www.cve.org/CVERecord?id=CVE-2026-1225
ch.qos.logback:logback-core	CVE-2026-9828	LOW	1.5.19	1.5.33	https://advisory.echohq.com/cve/CVE-2026-9828 https://github.com/qos-ch/logback https://logback.qos.ch/news.html#1.5.33 https://nvd.nist.gov/vuln/detail/CVE-2026-9828
com.fasterxml.jackson.core:jackson-core	CVE-2026-68494	HIGH	2.18.4.1	2.18.8, 2.21.4	https://access.redhat.com/security/cve/CVE-2026-68494 https://advisory.echohq.com/cve/CVE-2026-68494 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/050b429804dce2a7e08f0be1b0b4c3d040fdb9cd https://github.com/FasterXML/jackson-core/commit/4cdd529749da396cc7edf6d4a2aad41d47902641 https://github.com/FasterXML/jackson-core/commit/c5941e5aae7fd5aeac55d66933cfb82b9aabeef8 https://github.com/FasterXML/jackson-core/pull/1611 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-r7wm-3cxj-wff9 https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-68494 https://www.cve.org/CVERecord?id=CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-68494
com.fasterxml.jackson.core:jackson-core	CVE-2026-89407	HIGH	2.18.4.1	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-89407 https://advisory.echohq.com/cve/CVE-2026-89407 https://getsafety.com/vulnerabilities/SFTY-20260922-89449/CVE-2026-89407 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff https://github.com/FasterXML/jackson-core/issues/1649 https://github.com/FasterXML/jackson-core/pull/1650 https://github.com/FasterXML/jackson-core/pull/1701 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89 https://nvd.nist.gov/vuln/detail/CVE-2026-89407 https://www.cve.org/CVERecord?id=CVE-2026-89407
com.fasterxml.jackson.core:jackson-core	CVE-2026-89425	HIGH	2.18.4.1	2.21.7, 2.22.3, 2.18.11	https://access.redhat.com/security/cve/CVE-2026-89425 https://advisory.echohq.com/cve/CVE-2026-89425 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3 https://github.com/FasterXML/jackson-core/pull/1698 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11 https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf https://nvd.nist.gov/vuln/detail/CVE-2026-89425 https://www.cve.org/CVERecord?id=CVE-2026-89425
com.fasterxml.jackson.core:jackson-core	CVE-2026-18401	MEDIUM	2.18.4.1	2.21.1, 2.18.6	https://access.redhat.com/security/cve/CVE-2026-18401 https://advisory.echohq.com/cve/CVE-2026-18401 https://github.com/FasterXML/jackson-core https://github.com/FasterXML/jackson-core/commit/b0c428e6f993e1b5ece5c1c3cb2523e887cd52cf https://github.com/FasterXML/jackson-core/pull/1555 https://github.com/FasterXML/jackson-core/security/advisories/GHSA-72hv-8253-57qq https://github.com/advisories/GHSA-72hv-8253-57qq https://nvd.nist.gov/vuln/detail/CVE-2026-18401 https://www.cve.org/CVERecord?id=CVE-2026-18401
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54512	HIGH	2.18.4	2.18.8, 3.1.4, 2.21.4	https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/security/cve/CVE-2026-54512 https://advisory.echohq.com/cve/CVE-2026-54512 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5 https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5%20%28jackson-databind-2.18.8%29 https://github.com/FasterXML/jackson-databind/issues/5988 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm https://linux.oracle.com/cve/CVE-2026-54512.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54512 https://www.cve.org/CVERecord?id=CVE-2026-54512
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54513	HIGH	2.18.4	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:40895 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:43218 https://access.redhat.com/errata/RHSA-2026:43400 https://access.redhat.com/errata/RHSA-2026:44061 https://access.redhat.com/errata/RHSA-2026:44062 https://access.redhat.com/errata/RHSA-2026:44063 https://access.redhat.com/errata/RHSA-2026:44064 https://access.redhat.com/errata/RHSA-2026:44065 https://access.redhat.com/errata/RHSA-2026:44066 https://access.redhat.com/errata/RHSA-2026:44271 https://access.redhat.com/errata/RHSA-2026:48095 https://access.redhat.com/errata/RHSA-2026:48151 https://access.redhat.com/errata/RHSA-2026:50846 https://access.redhat.com/errata/RHSA-2026:50847 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:54622 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-54513 https://advisory.echohq.com/cve/CVE-2026-54513 https://bugzilla.redhat.com/2492010 https://bugzilla.redhat.com/2492015 https://bugzilla.redhat.com/show_bug.cgi?id=2492010 https://bugzilla.redhat.com/show_bug.cgi?id=2492015 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-54513 https://errata.almalinux.org/9/ALSA-2026-40895.html https://errata.rockylinux.org/RLSA-2026:40895 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5 https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e https://github.com/FasterXML/jackson-databind/issues/5981 https://github.com/FasterXML/jackson-databind/issues/5983 https://github.com/FasterXML/jackson-databind/pull/5984 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f https://linux.oracle.com/cve/CVE-2026-54513.html https://linux.oracle.com/errata/ELSA-2026-43400.html https://nvd.nist.gov/vuln/detail/CVE-2026-54513 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-54513.json https://www.cve.org/CVERecord?id=CVE-2026-54513
com.fasterxml.jackson.core:jackson-databind	CVE-2026-68497	HIGH	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/errata/RHSA-2026:80504 https://access.redhat.com/security/cve/CVE-2026-68497 https://advisory.echohq.com/cve/CVE-2026-68497 https://bugzilla.redhat.com/2531964 https://bugzilla.redhat.com/show_bug.cgi?id=2531964 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-68497 https://errata.almalinux.org/9/ALSA-2026-80504.html https://errata.rockylinux.org/RLSA-2026:80504 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd https://github.com/FasterXML/jackson-databind/pull/6127 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7 https://linux.oracle.com/cve/CVE-2026-68497.html https://linux.oracle.com/errata/ELSA-2026-80504.html https://nvd.nist.gov/vuln/detail/CVE-2026-68497 https://www.cve.org/CVERecord?id=CVE-2026-68497
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91776	HIGH	2.18.4	2.18.11, 2.21.7, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91776 https://advisory.echohq.com/cve/CVE-2026-91776 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577 https://github.com/FasterXML/jackson-databind/issues/6203 https://github.com/FasterXML/jackson-databind/pull/6203 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54 https://nvd.nist.gov/vuln/detail/CVE-2026-91776 https://www.cve.org/CVERecord?id=CVE-2026-91776
com.fasterxml.jackson.core:jackson-databind	CVE-2026-91777	HIGH	2.18.4	2.21.7, 2.18.11, 2.22.3	https://access.redhat.com/security/cve/CVE-2026-91777 https://advisory.echohq.com/cve/CVE-2026-91777 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67 https://github.com/FasterXML/jackson-databind/issues/6204 https://github.com/FasterXML/jackson-databind/pull/6204 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24 https://nvd.nist.gov/vuln/detail/CVE-2026-91777 https://www.cve.org/CVERecord?id=CVE-2026-91777
com.fasterxml.jackson.core:jackson-databind	CVE-2026-19032	MEDIUM	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-19032 https://advisory.echohq.com/cve/CVE-2026-19032 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551 https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166 https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d https://github.com/FasterXML/jackson-databind/pull/6129 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf https://nvd.nist.gov/vuln/detail/CVE-2026-19032 https://www.cve.org/CVERecord?id=CVE-2026-19032
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54514	MEDIUM	2.18.4	2.18.8, 2.21.4, 3.1.4	https://access.redhat.com/security/cve/CVE-2026-54514 https://advisory.echohq.com/cve/CVE-2026-54514 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/1f5a1037b1e9e05920e755cb35f198bcd46667e4 https://github.com/FasterXML/jackson-databind/pull/5951 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-hgj6-7826-r7m5 https://nvd.nist.gov/vuln/detail/CVE-2026-54514 https://www.cve.org/CVERecord?id=CVE-2026-54514
com.fasterxml.jackson.core:jackson-databind	CVE-2026-54515	MEDIUM	2.18.4	3.1.4, 2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-54515 https://advisory.echohq.com/cve/CVE-2026-54515 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa https://github.com/FasterXML/jackson-databind/issues/5962 https://github.com/FasterXML/jackson-databind/issues/5964 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v https://nvd.nist.gov/vuln/detail/CVE-2026-54515 https://www.cve.org/CVERecord?id=CVE-2026-54515
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59888	MEDIUM	2.18.4	2.18.8, 2.21.4	https://access.redhat.com/security/cve/CVE-2026-59888 https://advisory.echohq.com/cve/CVE-2026-59888 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/baa2cdf5ca2b2717fbb88d91955d69d8651df3e4 https://github.com/FasterXML/jackson-databind/commit/c7c678360624da5bc7eed2152789fa522880db9d https://github.com/FasterXML/jackson-databind/pull/5974 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-3pjw-73gf-8qr5 https://nvd.nist.gov/vuln/detail/CVE-2026-59888 https://www.cve.org/CVERecord?id=CVE-2026-59888
com.fasterxml.jackson.core:jackson-databind	CVE-2026-59889	MEDIUM	2.18.4	2.21.5, 2.18.9, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-59889 https://advisory.echohq.com/cve/CVE-2026-59889 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b https://github.com/FasterXML/jackson-databind/issues/6060 https://github.com/FasterXML/jackson-databind/pull/6056 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh https://nvd.nist.gov/vuln/detail/CVE-2026-59889 https://www.cve.org/CVERecord?id=CVE-2026-59889
com.fasterxml.jackson.core:jackson-databind	CVE-2026-77310	MEDIUM	2.18.4	2.18.9, 2.21.5, 2.22.1	https://access.redhat.com/security/cve/CVE-2026-77310 https://advisory.echohq.com/cve/CVE-2026-77310 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd https://github.com/FasterXML/jackson-databind/pull/6058 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6 https://nvd.nist.gov/vuln/detail/CVE-2026-77310 https://www.cve.org/CVERecord?id=CVE-2026-77310
com.fasterxml.jackson.core:jackson-databind	CVE-2026-83557	MEDIUM	2.18.4	2.18.10, 2.21.6, 2.22.2	https://access.redhat.com/security/cve/CVE-2026-83557 https://advisory.echohq.com/cve/CVE-2026-83557 https://getsafety.com/vulnerabilities/SFTY-20260901-46895/CVE-2026-83557 https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f https://github.com/FasterXML/jackson-databind/issues/6156 https://github.com/FasterXML/jackson-databind/pull/6155 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6 https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2 https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j https://nvd.nist.gov/vuln/detail/CVE-2026-83557 https://www.cve.org/CVERecord?id=CVE-2026-83557
com.fasterxml.jackson.core:jackson-databind	GHSA-mhm7-754m-9p8w	MEDIUM	2.18.4	2.18.9, 2.21.5	https://advisory.echohq.com/cve/GHSA-mhm7-754m-9p8w https://github.com/FasterXML/jackson-databind https://github.com/FasterXML/jackson-databind/commit/c628b357ed143d8492756d5c1458cfb9fbeb29ed https://github.com/FasterXML/jackson-databind/commit/dea7eb466e98cc226c4ac65587581fb49926820c https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-mhm7-754m-9p8w https://github.com/advisories/GHSA-mhm7-754m-9p8w
io.micrometer:micrometer-core	CVE-2026-40984	HIGH	1.14.12	1.16.6, 1.15.12	https://access.redhat.com/errata/RHSA-2026:36839 https://access.redhat.com/errata/RHSA-2026:37390 https://access.redhat.com/errata/RHSA-2026:41951 https://access.redhat.com/errata/RHSA-2026:50848 https://access.redhat.com/errata/RHSA-2026:50849 https://access.redhat.com/errata/RHSA-2026:54435 https://access.redhat.com/errata/RHSA-2026:62260 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-40984 https://advisory.echohq.com/cve/CVE-2026-40984 https://bugzilla.redhat.com/show_bug.cgi?id=2486716 https://github.com/micrometer-metrics/micrometer https://github.com/micrometer-metrics/micrometer/commit/36da131525228188a36779a28471a76c79213dd4 https://nvd.nist.gov/vuln/detail/CVE-2026-40984 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-40984.json https://spring.io/security/cve-2026-40984 https://www.cve.org/CVERecord?id=CVE-2026-40984
org.apache.logging.log4j:log4j-api	CVE-2026-49844	MEDIUM	2.24.3	2.25.5, 2.26.1	https://access.redhat.com/security/cve/CVE-2026-49844 https://advisory.echohq.com/cve/CVE-2026-49844 https://github.com/apache/logging-log4j2 https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300 https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82 https://github.com/apache/logging-log4j2/pull/4163 https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5 https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1 https://logging.apache.org/cyclonedx/vdr.xml https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message https://logging.apache.org/security.html#CVE-2026-49844 https://nvd.nist.gov/vuln/detail/CVE-2026-49844 https://www.cve.org/CVERecord?id=CVE-2026-49844
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41293	CRITICAL	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/13 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-41293 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/19f17a257797e8d139b33ff9c88d362a273be148 https://github.com/apache/tomcat/commit/1c70480466572c9192ed412ebefcd43fc63137fd https://github.com/apache/tomcat/commit/2a2476460e823789f530a22207873ea8cd6eff3b https://github.com/apache/tomcat/commit/3915fd27e6810b14ccd21e3d900bd8faef44d3df https://github.com/apache/tomcat/commit/57c2b3bfd62792631e1df24cf4237b990a0b36fa https://github.com/apache/tomcat/commit/c2925554c677da57390f940d856871e18daaacab https://github.com/apache/tomcat/commit/cf9452443bcbf3b1a4b435ef7d624364f1b65ca3 https://github.com/apache/tomcat/commit/e5cef9618c3f4fd31bd6fb1e83f0f18022280dac https://github.com/apache/tomcat/commit/f72a6174ab1f0f5a053435f80448b4f6837fe6d7 https://linux.oracle.com/cve/CVE-2026-41293.html https://linux.oracle.com/errata/ELSA-2026-69259.html https://lists.apache.org/thread/qwg0q16z7xkb2qrr853wdll5531mvl1r https://nvd.nist.gov/vuln/detail/CVE-2026-41293 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8417-1 https://ubuntu.com/security/notices/USN-8450-1 https://www.cve.org/CVERecord?id=CVE-2026-41293
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43512	CRITICAL	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/8 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-43512 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat/commit/3d4d3fae07a6cd9c2eb193c5491001740ec64448 https://github.com/apache/tomcat/commit/6565a6cb6499e56fe2f34457cec99f9d1c4f39e9 https://github.com/apache/tomcat/commit/a99c355e8199adbfd67c9a1fffbd85b810b196cd https://linux.oracle.com/cve/CVE-2026-43512.html https://linux.oracle.com/errata/ELSA-2026-69259.html https://lists.apache.org/thread/7x09x7o12solvclslw3sz0288xc8wx73 https://nvd.nist.gov/vuln/detail/CVE-2026-43512 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8383-1 https://ubuntu.com/security/notices/USN-8417-1 https://www.cve.org/CVERecord?id=CVE-2026-43512
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43515	CRITICAL	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/11 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-43515 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/276087d9c7abbcecc6c4fb4e4b08cf64780c6e36 https://github.com/apache/tomcat/commit/c621317382682206fb58ab92ebd3e1b6fdd10ce9 https://github.com/apache/tomcat/commit/db919ff9912b4d61d1b702a1342b8bde39270031 https://linux.oracle.com/cve/CVE-2026-43515.html https://linux.oracle.com/errata/ELSA-2026-69259.html https://lists.apache.org/thread/746nxfxod0wsocxtmv8pb8nkgmwpc6bb https://nvd.nist.gov/vuln/detail/CVE-2026-43515 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8383-1 https://ubuntu.com/security/notices/USN-8417-1 https://ubuntu.com/security/notices/USN-8450-1 https://ubuntu.com/security/notices/USN-8551-1 https://www.cve.org/CVERecord?id=CVE-2026-43515
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65182	CRITICAL	10.1.48	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/1 https://access.redhat.com/security/cve/CVE-2026-65182 https://advisory.echohq.com/cve/CVE-2026-65182 https://github.com/apache/tomcat/commit/8bafd79a3b54684e80e9cb1bafd4746aede7d3f5 https://github.com/apache/tomcat/commit/b2c56ec8f20c66773a1a813034ffcdb60841f1cf https://github.com/apache/tomcat/commit/b79752d2a8578d94743e2a95c50af297f780c0df https://lists.apache.org/thread/joosxvzc9b49ttj8lj0jw9mqt0ml767m https://nvd.nist.gov/vuln/detail/CVE-2026-65182 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-65182
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-65905	CRITICAL	10.1.48	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/4 https://access.redhat.com/security/cve/CVE-2026-65905 https://advisory.echohq.com/cve/CVE-2026-65905 https://github.com/apache/tomcat https://lists.apache.org/thread/9v114xlpgbzrrbzz5vf9f6r2q4wnxwwj https://nvd.nist.gov/vuln/detail/CVE-2026-65905 https://www.cve.org/CVERecord?id=CVE-2026-65905
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-68525	CRITICAL	10.1.48	11.0.25, 10.1.58, 9.0.121	http://www.openwall.com/lists/oss-security/2026/08/26/7 https://access.redhat.com/security/cve/CVE-2026-68525 https://advisory.echohq.com/cve/CVE-2026-68525 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/10d048e16034ddf12055e0cede0da05b15c823b8 https://github.com/apache/tomcat/commit/32f0c38526b4e655ff0c17cd97afedefc624fe43 https://github.com/apache/tomcat/commit/58123aa468a20e2a079b7e0c68a4009e2475c098 https://lists.apache.org/thread/x1y2lfsgzxwzc456f8954vbvgn03zhd7 https://nvd.nist.gov/vuln/detail/CVE-2026-68525 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-68525
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-24734	HIGH	10.1.48	11.0.18, 10.1.52, 9.0.115	https://access.redhat.com/errata/RHSA-2026:19054 https://access.redhat.com/errata/RHSA-2026:26323 https://access.redhat.com/errata/RHSA-2026:36790 https://access.redhat.com/errata/RHSA-2026:5611 https://access.redhat.com/errata/RHSA-2026:5612 https://access.redhat.com/errata/RHSA-2026:6569 https://access.redhat.com/errata/RHSA-2026:8334 https://access.redhat.com/security/cve/CVE-2026-24734 https://bugzilla.redhat.com/2440426 https://bugzilla.redhat.com/show_bug.cgi?id=2440426 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24734 https://errata.almalinux.org/9/ALSA-2026-26323.html https://errata.rockylinux.org/RLSA-2026:26323 https://github.com/apache/tomcat https://linux.oracle.com/cve/CVE-2026-24734.html https://linux.oracle.com/errata/ELSA-2026-26323.html https://lists.apache.org/thread/292dlmx3fz1888v6v16221kpozq56gml https://nvd.nist.gov/vuln/detail/CVE-2026-24734 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-24734.json https://www.cve.org/CVERecord?id=CVE-2026-24734
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-24880	HIGH	10.1.48	9.0.116, 10.1.52, 11.0.20	http://www.openwall.com/lists/oss-security/2026/04/09/20 https://access.redhat.com/errata/RHSA-2026:68677 https://access.redhat.com/security/cve/CVE-2026-24880 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2494669 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2326972 https://bugzilla.redhat.com/show_bug.cgi?id=2332815 https://bugzilla.redhat.com/show_bug.cgi?id=2369253 https://bugzilla.redhat.com/show_bug.cgi?id=2388226 https://bugzilla.redhat.com/show_bug.cgi?id=2406588 https://bugzilla.redhat.com/show_bug.cgi?id=2406590 https://bugzilla.redhat.com/show_bug.cgi?id=2440430 https://bugzilla.redhat.com/show_bug.cgi?id=2440437 https://bugzilla.redhat.com/show_bug.cgi?id=2457037 https://bugzilla.redhat.com/show_bug.cgi?id=2457038 https://bugzilla.redhat.com/show_bug.cgi?id=2457039 https://bugzilla.redhat.com/show_bug.cgi?id=2457040 https://bugzilla.redhat.com/show_bug.cgi?id=2457044 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494669 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/8/ALSA-2026-68677.html https://errata.rockylinux.org/RLSA-2026:68677 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5 https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522 https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552 https://lists.apache.org/thread/2c682qnlg2tv4o5knlggqbl9yc2gb5sn https://nvd.nist.gov/vuln/detail/CVE-2026-24880 https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53 https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20 https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116 https://www.cve.org/CVERecord?id=CVE-2026-24880 https://www.herodevs.com/vulnerability-directory/cve-2026-24880
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-34483	HIGH	10.1.48	9.0.116, 10.1.54, 11.0.21	http://www.openwall.com/lists/oss-security/2026/04/09/26 https://access.redhat.com/errata/RHSA-2026:68677 https://access.redhat.com/security/cve/CVE-2026-34483 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2494669 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2326972 https://bugzilla.redhat.com/show_bug.cgi?id=2332815 https://bugzilla.redhat.com/show_bug.cgi?id=2369253 https://bugzilla.redhat.com/show_bug.cgi?id=2388226 https://bugzilla.redhat.com/show_bug.cgi?id=2406588 https://bugzilla.redhat.com/show_bug.cgi?id=2406590 https://bugzilla.redhat.com/show_bug.cgi?id=2440430 https://bugzilla.redhat.com/show_bug.cgi?id=2440437 https://bugzilla.redhat.com/show_bug.cgi?id=2457037 https://bugzilla.redhat.com/show_bug.cgi?id=2457038 https://bugzilla.redhat.com/show_bug.cgi?id=2457039 https://bugzilla.redhat.com/show_bug.cgi?id=2457040 https://bugzilla.redhat.com/show_bug.cgi?id=2457044 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494669 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/8/ALSA-2026-68677.html https://errata.rockylinux.org/RLSA-2026:68677 https://github.com/apache/tomcat https://lists.apache.org/thread/j1w7304yonlr8vo1tkb5nfs7od1y228b https://nvd.nist.gov/vuln/detail/CVE-2026-34483 https://www.cve.org/CVERecord?id=CVE-2026-34483
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-34487	HIGH	10.1.48	9.0.117, 10.1.54, 11.0.21	http://www.openwall.com/lists/oss-security/2026/04/09/28 https://access.redhat.com/errata/RHSA-2026:68677 https://access.redhat.com/security/cve/CVE-2026-34487 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2494669 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2326972 https://bugzilla.redhat.com/show_bug.cgi?id=2332815 https://bugzilla.redhat.com/show_bug.cgi?id=2369253 https://bugzilla.redhat.com/show_bug.cgi?id=2388226 https://bugzilla.redhat.com/show_bug.cgi?id=2406588 https://bugzilla.redhat.com/show_bug.cgi?id=2406590 https://bugzilla.redhat.com/show_bug.cgi?id=2440430 https://bugzilla.redhat.com/show_bug.cgi?id=2440437 https://bugzilla.redhat.com/show_bug.cgi?id=2457037 https://bugzilla.redhat.com/show_bug.cgi?id=2457038 https://bugzilla.redhat.com/show_bug.cgi?id=2457039 https://bugzilla.redhat.com/show_bug.cgi?id=2457040 https://bugzilla.redhat.com/show_bug.cgi?id=2457044 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494669 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/8/ALSA-2026-68677.html https://errata.rockylinux.org/RLSA-2026:68677 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/301bc6efbf72feb14dacfdfa3f50372182736150 https://github.com/apache/tomcat/commit/5eff2a773b8b728083e5195b3183df1b9e12a03d https://github.com/apache/tomcat/commit/f593292a082e5ef9336a8db2b4b522f7f3e36976 https://lists.apache.org/thread/4xpkwolpkrj8v5xzp5nyovtlqp3y850h https://nvd.nist.gov/vuln/detail/CVE-2026-34487 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-34487
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-41284	HIGH	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/12 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-41284 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/17dacd9aa48628da2eba37a9ab743c0b6c71685c https://github.com/apache/tomcat/commit/a96fffd18487a29c0a30d36f00cb2b2d91f6d42c https://github.com/apache/tomcat/commit/b3d1c1c239142e806be0b7329d304b94a58913ed https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc https://nvd.nist.gov/vuln/detail/CVE-2026-41284 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8417-1 https://ubuntu.com/security/notices/USN-8450-1 https://www.cve.org/CVERecord?id=CVE-2026-41284
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-42498	HIGH	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/14 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-42498 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/169d725788ea6aec217ecac70fe4161c837ba423 https://github.com/apache/tomcat/commit/6cbe274592ef2d11607b5b188e1df649de52f8d5 https://github.com/apache/tomcat/commit/b7b173694d588ddcfa432f079baf763cbbbaa5c4 https://linux.oracle.com/cve/CVE-2026-42498.html https://linux.oracle.com/errata/ELSA-2026-69259.html https://lists.apache.org/thread/n61zwf75jrv09rz90j4jssncm244bwdb https://nvd.nist.gov/vuln/detail/CVE-2026-42498 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8417-1 https://ubuntu.com/security/notices/USN-8450-1 https://www.cve.org/CVERecord?id=CVE-2026-42498
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43513	HIGH	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/9 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-43513 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/4a90d3fa93988c447cd5bb7482f76ff70d7f15c2 https://github.com/apache/tomcat/commit/6dd75beb55bd42fc5f78e929596b25018cd17717 https://github.com/apache/tomcat/commit/83f3e51df7b87f5f6e626951c575ded1a512e8ef https://linux.oracle.com/cve/CVE-2026-43513.html https://linux.oracle.com/errata/ELSA-2026-69259.html https://lists.apache.org/thread/ytjcgldshj73lcnd1sh95od5hrghwogp https://nvd.nist.gov/vuln/detail/CVE-2026-43513 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://ubuntu.com/security/notices/USN-8383-1 https://ubuntu.com/security/notices/USN-8417-1 https://www.cve.org/CVERecord?id=CVE-2026-43513
org.apache.tomcat.embed:tomcat-embed-core	CVE-2025-66614	MEDIUM	10.1.48	11.0.15, 10.1.50, 9.0.113	https://access.redhat.com/errata/RHSA-2026:68677 https://access.redhat.com/security/cve/CVE-2025-66614 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2494669 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2326972 https://bugzilla.redhat.com/show_bug.cgi?id=2332815 https://bugzilla.redhat.com/show_bug.cgi?id=2369253 https://bugzilla.redhat.com/show_bug.cgi?id=2388226 https://bugzilla.redhat.com/show_bug.cgi?id=2406588 https://bugzilla.redhat.com/show_bug.cgi?id=2406590 https://bugzilla.redhat.com/show_bug.cgi?id=2440430 https://bugzilla.redhat.com/show_bug.cgi?id=2440437 https://bugzilla.redhat.com/show_bug.cgi?id=2457037 https://bugzilla.redhat.com/show_bug.cgi?id=2457038 https://bugzilla.redhat.com/show_bug.cgi?id=2457039 https://bugzilla.redhat.com/show_bug.cgi?id=2457040 https://bugzilla.redhat.com/show_bug.cgi?id=2457044 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494669 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/8/ALSA-2026-68677.html https://errata.rockylinux.org/RLSA-2026:68677 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/152c14885d45f5e0a8b59bd9f93c289cfe20ce30 https://github.com/apache/tomcat/commit/258a591b61f8cf5c22109e21e5a2a38b63454fd2 https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4 https://github.com/apache/tomcat/commit/9276b5e783c8cd5b3fe2bb716306b65004bdd940 https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e https://github.com/apache/tomcat/commit/a4aa74232e826028cd2f7ba0445caf8a8b52c509 https://lists.apache.org/thread/vw6lxtlh2qbqwpb61wd3sv1flm2nttw7 https://nvd.nist.gov/vuln/detail/CVE-2025-66614 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2025-66614
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-25854	MEDIUM	10.1.48	9.0.116, 10.1.53, 11.0.20	http://www.openwall.com/lists/oss-security/2026/04/09/21 https://access.redhat.com/errata/RHSA-2026:68677 https://access.redhat.com/security/cve/CVE-2026-25854 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2494669 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2326972 https://bugzilla.redhat.com/show_bug.cgi?id=2332815 https://bugzilla.redhat.com/show_bug.cgi?id=2369253 https://bugzilla.redhat.com/show_bug.cgi?id=2388226 https://bugzilla.redhat.com/show_bug.cgi?id=2406588 https://bugzilla.redhat.com/show_bug.cgi?id=2406590 https://bugzilla.redhat.com/show_bug.cgi?id=2440430 https://bugzilla.redhat.com/show_bug.cgi?id=2440437 https://bugzilla.redhat.com/show_bug.cgi?id=2457037 https://bugzilla.redhat.com/show_bug.cgi?id=2457038 https://bugzilla.redhat.com/show_bug.cgi?id=2457039 https://bugzilla.redhat.com/show_bug.cgi?id=2457040 https://bugzilla.redhat.com/show_bug.cgi?id=2457044 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494669 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52316 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-46701 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55668 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-55754 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61795 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24733 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55957 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/8/ALSA-2026-68677.html https://errata.rockylinux.org/RLSA-2026:68677 https://github.com/apache/tomcat https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0 https://nvd.nist.gov/vuln/detail/CVE-2026-25854 https://www.cve.org/CVERecord?id=CVE-2026-25854
org.apache.tomcat.embed:tomcat-embed-core	CVE-2026-43514	LOW	10.1.48	9.0.118, 10.1.55, 11.0.22	http://www.openwall.com/lists/oss-security/2026/05/12/10 https://access.redhat.com/errata/RHSA-2026:68660 https://access.redhat.com/security/cve/CVE-2026-43514 https://bugzilla.redhat.com/2457025 https://bugzilla.redhat.com/2476511 https://bugzilla.redhat.com/2476513 https://bugzilla.redhat.com/2476516 https://bugzilla.redhat.com/2476519 https://bugzilla.redhat.com/2476520 https://bugzilla.redhat.com/2499917 https://bugzilla.redhat.com/2499931 https://bugzilla.redhat.com/show_bug.cgi?id=2457025 https://bugzilla.redhat.com/show_bug.cgi?id=2476511 https://bugzilla.redhat.com/show_bug.cgi?id=2476512 https://bugzilla.redhat.com/show_bug.cgi?id=2476513 https://bugzilla.redhat.com/show_bug.cgi?id=2476516 https://bugzilla.redhat.com/show_bug.cgi?id=2476518 https://bugzilla.redhat.com/show_bug.cgi?id=2476519 https://bugzilla.redhat.com/show_bug.cgi?id=2476520 https://bugzilla.redhat.com/show_bug.cgi?id=2494668 https://bugzilla.redhat.com/show_bug.cgi?id=2494675 https://bugzilla.redhat.com/show_bug.cgi?id=2494676 https://bugzilla.redhat.com/show_bug.cgi?id=2494678 https://bugzilla.redhat.com/show_bug.cgi?id=2494681 https://bugzilla.redhat.com/show_bug.cgi?id=2494688 https://bugzilla.redhat.com/show_bug.cgi?id=2499917 https://bugzilla.redhat.com/show_bug.cgi?id=2499931 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41284 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41293 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42498 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43512 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43513 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43514 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-43515 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50229 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-53434 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55276 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55955 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59083 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084 https://errata.almalinux.org/9/ALSA-2026-68660.html https://errata.rockylinux.org/RLSA-2026:68660 https://github.com/apache/tomcat https://github.com/apache/tomcat/commit/933dcdbf2515972280002929e7e597dead2e9ffa https://github.com/apache/tomcat/commit/a102a2a157868ca51d83eaf5a119ccd9976a113e https://github.com/apache/tomcat/commit/d35d9d23263c8e4af561f615c960c91697ff200e https://lists.apache.org/thread/2k654v5cq123npfsd1b2kk1y30owqb1m https://nvd.nist.gov/vuln/detail/CVE-2026-43514 https://tomcat.apache.org/security-10.html https://tomcat.apache.org/security-11.html https://tomcat.apache.org/security-9.html https://www.cve.org/CVERecord?id=CVE-2026-43514
org.postgresql:postgresql	CVE-2026-42198	HIGH	42.7.8	42.7.11	https://access.redhat.com/errata/RHSA-2026:19098 https://access.redhat.com/errata/RHSA-2026:22304 https://access.redhat.com/errata/RHSA-2026:24348 https://access.redhat.com/errata/RHSA-2026:25030 https://access.redhat.com/errata/RHSA-2026:52928 https://access.redhat.com/errata/RHSA-2026:52929 https://access.redhat.com/errata/RHSA-2026:52930 https://access.redhat.com/errata/RHSA-2026:52978 https://access.redhat.com/errata/RHSA-2026:54532 https://access.redhat.com/errata/RHSA-2026:59277 https://access.redhat.com/errata/RHSA-2026:59278 https://access.redhat.com/errata/RHSA-2026:66488 https://access.redhat.com/errata/RHSA-2026:66545 https://access.redhat.com/security/cve/CVE-2026-42198 https://advisory.echohq.com/cve/CVE-2026-42198 https://bugzilla.redhat.com/2463857 https://bugzilla.redhat.com/show_bug.cgi?id=2463857 https://creativecommons.org/licenses/by/4.0/ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42198 https://errata.almalinux.org/9/ALSA-2026-22304.html https://errata.rockylinux.org/RLSA-2026:22304 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/releases/tag/REL42.7.11 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-98qh-xjc8-98pq https://linux.oracle.com/cve/CVE-2026-42198.html https://linux.oracle.com/errata/ELSA-2026-25030.html https://nvd.nist.gov/vuln/detail/CVE-2026-42198 https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42198.json https://www.cve.org/CVERecord?id=CVE-2026-42198
org.postgresql:postgresql	CVE-2026-54291	HIGH	42.7.8	42.7.12	https://access.redhat.com/security/cve/CVE-2026-54291 https://advisory.echohq.com/cve/CVE-2026-54291 https://github.com/ongres/scram/releases/tag/3.3 https://github.com/pgjdbc/pgjdbc https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99 https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867 https://nvd.nist.gov/vuln/detail/CVE-2026-54291 https://www.cve.org/CVERecord?id=CVE-2026-54291
org.springframework.boot:spring-boot	CVE-2026-40973	HIGH	3.4.11	4.0.6, 3.5.14	https://access.redhat.com/security/cve/CVE-2026-40973 https://advisory.echohq.com/cve/CVE-2026-40973 https://github.com/spring-projects/spring-boot https://nvd.nist.gov/vuln/detail/CVE-2026-40973 https://spring.io/security/cve-2026-40973 https://www.cve.org/CVERecord?id=CVE-2026-40973
org.springframework.boot:spring-boot-autoconfigure	CVE-2026-41001	MEDIUM	3.4.11	4.0.7, 3.5.15	https://access.redhat.com/security/cve/CVE-2026-41001 https://advisory.echohq.com/cve/CVE-2026-41001 https://github.com/advisories/GHSA-ggg2-9786-hwc8 https://github.com/spring-projects/spring-boot https://github.com/spring-projects/spring-boot/commit/4218bd76e934e5cf9e3fd3997c67b8a6b0d0c111 https://nvd.nist.gov/vuln/detail/CVE-2026-41001 https://spring.io/security/cve-2026-41001 https://www.cve.org/CVERecord?id=CVE-2026-41001
org.springframework.data:spring-data-commons	CVE-2026-41695	HIGH	3.4.11	4.0.6, 3.5.12	https://access.redhat.com/security/cve/CVE-2026-41695 https://github.com/spring-projects/security-advisories https://github.com/spring-projects/security-advisories/security/advisories/GHSA-88fw-v6x4-3f58 https://github.com/spring-projects/spring-data-commons/commit/96e9475b963218bb702959524187342671f6b080 https://github.com/spring-projects/spring-data-commons/commit/a4f893b66c18c70f2b22f29a2b55097b73c89941 https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12 https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6 https://nvd.nist.gov/vuln/detail/CVE-2026-41695 https://spring.io/security/cve-2026-41695 https://www.cve.org/CVERecord?id=CVE-2026-41695
org.springframework.data:spring-data-commons	CVE-2026-41716	HIGH	3.4.11	4.0.6, 3.5.12	https://access.redhat.com/security/cve/CVE-2026-41716 https://github.com/spring-projects/spring-data-commons https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12 https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6 https://nvd.nist.gov/vuln/detail/CVE-2026-41716 https://spring.io/security/cve-2026-41716 https://www.cve.org/CVERecord?id=CVE-2026-41716
org.springframework.data:spring-data-commons	CVE-2026-41711	MEDIUM	3.4.11	4.0.6, 3.5.12	https://access.redhat.com/security/cve/CVE-2026-41711 https://github.com/spring-projects/spring-data-commons https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12 https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6 https://nvd.nist.gov/vuln/detail/CVE-2026-41711 https://spring.io/security/cve-2026-41711 https://www.cve.org/CVERecord?id=CVE-2026-41711
org.springframework.data:spring-data-commons	CVE-2026-41721	MEDIUM	3.4.11	4.0.6, 3.5.12	https://access.redhat.com/security/cve/CVE-2026-41721 https://github.com/spring-projects/spring-data-commons/releases/tag/3.5.12 https://github.com/spring-projects/spring-data-commons/releases/tag/4.0.6 https://nvd.nist.gov/vuln/detail/CVE-2026-41721 https://spring.io/security/cve-2026-41721 https://www.cve.org/CVERecord?id=CVE-2026-41721
org.springframework.security:spring-security-core	CVE-2026-22751	MEDIUM	6.5.4	6.5.10, 7.0.5	https://access.redhat.com/security/cve/CVE-2026-22751 https://advisory.echohq.com/cve/CVE-2026-22751 https://github.com/advisories/GHSA-x2wq-9x2f-fhj7 https://github.com/spring-projects/spring-security https://github.com/spring-projects/spring-security/commit/163772775036c4146815a5266874278c6f45f047 https://github.com/spring-projects/spring-security/commit/4187af38b251fc97fdf9949f7869618111e6e261 https://jinyeong.seol.pro/blogs/cve-2026-22751/en https://nvd.nist.gov/vuln/detail/CVE-2026-22751 https://spring.io/security/cve-2026-22751 https://www.cve.org/CVERecord?id=CVE-2026-22751
org.springframework.security:spring-security-core	CVE-2026-22746	LOW	6.5.4	6.5.10, 7.0.5	https://access.redhat.com/security/cve/CVE-2026-22746 https://advisory.echohq.com/cve/CVE-2026-22746 https://github.com/advisories/GHSA-vxf7-qj7q-83fh https://github.com/spring-projects/spring-security https://nvd.nist.gov/vuln/detail/CVE-2026-22746 https://spring.io/security/cve-2026-22746 https://www.cve.org/CVERecord?id=CVE-2026-22746
org.springframework:spring-core	CVE-2026-41848	LOW	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41848 https://advisory.echohq.com/cve/CVE-2026-41848 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/12b44f2545a1bec6150c7a05e66092c732597a94 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41848 https://spring.io/security/cve-2026-41848 https://www.cve.org/CVERecord?id=CVE-2026-41848
org.springframework:spring-expression	CVE-2026-41850	HIGH	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41850 https://advisory.echohq.com/cve/CVE-2026-41850 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41850 https://spring.io/security/cve-2026-41850 https://www.cve.org/CVERecord?id=CVE-2026-41850
org.springframework:spring-expression	CVE-2026-41851	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41851 https://advisory.echohq.com/cve/CVE-2026-41851 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/2c18c33ce0f89bf718c184190cfb7ed49b4276fb https://github.com/spring-projects/spring-framework/commit/76a36dfd707cddbe7118a81c2e055b36501d2cff https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41851 https://spring.io/security/cve-2026-41851 https://www.cve.org/CVERecord?id=CVE-2026-41851
org.springframework:spring-expression	CVE-2026-41852	LOW	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41852 https://advisory.echohq.com/cve/CVE-2026-41852 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41852 https://spring.io/security/cve-2026-41852 https://www.cve.org/CVERecord?id=CVE-2026-41852
org.springframework:spring-web	CVE-2026-41854	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41854 https://advisory.echohq.com/cve/CVE-2026-41854 https://github.com/advisories/GHSA-7m2p-62gw-p8qq https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-41854 https://spring.io/security/cve-2026-41854 https://www.cve.org/CVERecord?id=CVE-2026-41854
org.springframework:spring-webmvc	CVE-2026-47884	CRITICAL	6.2.12	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47884 https://advisory.echohq.com/cve/CVE-2026-47884 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/692dbc9160de3b5de50ccedeee014716d0cedb7b https://nvd.nist.gov/vuln/detail/CVE-2026-47884 https://spring.io/security/cve-2026-47884 https://www.cve.org/CVERecord?id=CVE-2026-47884
org.springframework:spring-webmvc	CVE-2026-47890	CRITICAL	6.2.12	7.0.9	https://access.redhat.com/security/cve/CVE-2026-47890 https://advisory.echohq.com/cve/CVE-2026-47890 https://github.com/advisories/GHSA-j9f9-w8pj-32f8 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-47890 https://spring.io/security/cve-2026-47890 https://www.cve.org/CVERecord?id=CVE-2026-47890
org.springframework:spring-webmvc	CVE-2026-41842	HIGH	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41842 https://advisory.echohq.com/cve/CVE-2026-41842 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41842 https://spring.io/security/cve-2026-41842 https://www.cve.org/CVERecord?id=CVE-2026-41842
org.springframework:spring-webmvc	CVE-2026-41845	HIGH	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41845 https://advisory.echohq.com/cve/CVE-2026-41845 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/86d99790dbaa8ce6bb1087ef92844d0abfdab015 https://github.com/spring-projects/spring-framework/commit/a1826b725c29fbb175fa7b4fc005aa3d78c32015 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41845 https://spring.io/security/cve-2026-41845 https://www.cve.org/CVERecord?id=CVE-2026-41845
org.springframework:spring-webmvc	CVE-2026-22737	MEDIUM	6.2.12	7.0.6, 6.2.17	https://access.redhat.com/security/cve/CVE-2026-22737 https://advisory.echohq.com/cve/CVE-2026-22737 https://github.com/advisories/GHSA-4773-3jfm-qmx3 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22737 https://spring.io/security/cve-2026-22737 https://www.cve.org/CVERecord?id=CVE-2026-22737
org.springframework:spring-webmvc	CVE-2026-22745	MEDIUM	6.2.12	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22745 https://advisory.echohq.com/cve/CVE-2026-22745 https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22745 https://spring.io/security/cve-2026-22745 https://www.cve.org/CVERecord?id=CVE-2026-22745
org.springframework:spring-webmvc	CVE-2026-41841	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41841 https://advisory.echohq.com/cve/CVE-2026-41841 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41841 https://spring.io/security/cve-2026-41841 https://www.cve.org/CVERecord?id=CVE-2026-41841
org.springframework:spring-webmvc	CVE-2026-41843	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41843 https://advisory.echohq.com/cve/CVE-2026-41843 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41843 https://spring.io/security/cve-2026-41843 https://www.cve.org/CVERecord?id=CVE-2026-41843
org.springframework:spring-webmvc	CVE-2026-41844	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41844 https://advisory.echohq.com/cve/CVE-2026-41844 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/3aaec987651cf82fd4ed7e0ed9b3deddcdf58853 https://github.com/spring-projects/spring-framework/commit/7add5243b9db13a9f8e765c8ab8545c8e8fe606b https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41844 https://spring.io/security/cve-2026-41844 https://www.cve.org/CVERecord?id=CVE-2026-41844
org.springframework:spring-webmvc	CVE-2026-41846	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41846 https://advisory.echohq.com/cve/CVE-2026-41846 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/commit/1829b42b9c45e780c268dd17863d9198d62154d3 https://github.com/spring-projects/spring-framework/commit/e8f10244e3859e8bb5b6be3823c9bbea2c130573 https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41846 https://spring.io/security/cve-2026-41846 https://www.cve.org/CVERecord?id=CVE-2026-41846
org.springframework:spring-webmvc	CVE-2026-41853	MEDIUM	6.2.12	7.0.8, 6.2.19	https://access.redhat.com/security/cve/CVE-2026-41853 https://advisory.echohq.com/cve/CVE-2026-41853 https://github.com/spring-projects/spring-framework https://github.com/spring-projects/spring-framework/releases/tag/v6.2.19 https://github.com/spring-projects/spring-framework/releases/tag/v7.0.8 https://nvd.nist.gov/vuln/detail/CVE-2026-41853 https://spring.io/security/cve-2026-41853 https://www.cve.org/CVERecord?id=CVE-2026-41853
org.springframework:spring-webmvc	CVE-2026-22735	LOW	6.2.12	7.0.6, 6.2.17	https://access.redhat.com/security/cve/CVE-2026-22735 https://advisory.echohq.com/cve/CVE-2026-22735 https://github.com/advisories/GHSA-6hcq-hmm3-jj3c https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln/detail/CVE-2026-22735 https://spring.io/security/cve-2026-22735 https://www.cve.org/CVERecord?id=CVE-2026-22735
org.springframework:spring-webmvc	CVE-2026-22741	LOW	6.2.12	7.0.7, 6.2.18	https://access.redhat.com/security/cve/CVE-2026-22741 https://advisory.echohq.com/cve/CVE-2026-22741 https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title https://github.com/spring-projects/spring-framework https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L&version=3.1 https://nvd.nist.gov/vuln/detail/CVE-2026-22741 https://spring.io/security/cve-2026-22741 https://www.cve.org/CVERecord?id=CVE-2026-22741
No Misconfigurations found