{ "@id": "urn:uuid:bac34009-06f5-4ee4-9e9e-a49e56c74554", "role": "Document Creator", "author": "https://tuxcare.com", "version": 5, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-23T21:50:56.656209+00:00", "statements": [ { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-23T11:03:11.209964+00:00", "status_notes": "Vulnerability CVE-2024-23672 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket. Tomcat 10.1.33 is not vulnerable as it is higher than upstream fix version - 10.1.19", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-23672" }, "impact_statement": "Tomcat 10.1.33 is not vulnerable as it is higher than upstream fix version - 10.1.19" }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2024-24549 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket. Target version 10.1.33 is not affected. The upstream Apache Tomcat fix for CVE-2024-24549 is already present in this version. The fix moves HTTP/2 header validation from after all frames are processed to after each individual HEADERS/CONTINUATION frame, preventing attackers from forcing the server to buffer excessive header data before limits are checked. The fix was authored by upstream (Mark Thomas, markt@apache.org) on Jan 25, 2024 and was included in Apache Tomcat 10.1.19+. TuxCare onboarded upstream 10.1.33 which already contained this fix.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-24549" }, "impact_statement": "Target version 10.1.33 is not affected. The upstream Apache Tomcat fix for CVE-2024-24549 is already present in this version. The fix moves HTTP/2 header validation from after all frames are processed to after each individual HEADERS/CONTINUATION frame, preventing attackers from forcing the server to buffer excessive header data before limits are checked. The fix was authored by upstream (Mark Thomas, markt@apache.org) on Jan 25, 2024 and was included in Apache Tomcat 10.1.19+. TuxCare onboarded upstream 10.1.33 which already contained this fix." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2024-50379 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-50379" }, "action_statement": "Vulnerability CVE-2024-50379 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2024-52316 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket. CVE-2024-52316 does not affect Apache Tomcat 10.1.33. The vulnerability (unchecked error condition in Jakarta Authentication that could allow authentication bypass when ServerAuthContext throws an exception without setting HTTP status) was fixed by upstream Apache in version 10.1.31. The target version 10.1.33 includes the upstream fix (commit acc2f01395 by Mark Thomas) which explicitly sets HTTP 500 status when validateRequest() throws an AuthException. The fix is present in AuthenticatorBase.authenticateJaspic() in java/org/apache/catalina/authenticator/AuthenticatorBase.java.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-52316" }, "impact_statement": "CVE-2024-52316 does not affect Apache Tomcat 10.1.33. The vulnerability (unchecked error condition in Jakarta Authentication that could allow authentication bypass when ServerAuthContext throws an exception without setting HTTP status) was fixed by upstream Apache in version 10.1.31. The target version 10.1.33 includes the upstream fix (commit acc2f01395 by Mark Thomas) which explicitly sets HTTP 500 status when validateRequest() throws an AuthException. The fix is present in AuthenticatorBase.authenticateJaspic() in java/org/apache/catalina/authenticator/AuthenticatorBase.java." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2024-54677 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-54677" }, "action_statement": "Vulnerability CVE-2024-54677 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2024-56337 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2024-56337" }, "action_statement": "Vulnerability CVE-2024-56337 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-24813 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-24813" }, "action_statement": "Vulnerability CVE-2025-24813 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-31650 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-31650" }, "action_statement": "Vulnerability CVE-2025-31650 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-31651 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-31651" }, "action_statement": "Vulnerability CVE-2025-31651 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:47:00.125685+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-48988 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-48988" }, "action_statement": "Vulnerability CVE-2025-48988 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:47:00.125685+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-49124 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-49124" }, "action_statement": "Vulnerability CVE-2025-49124 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-49125 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-49125" }, "action_statement": "Vulnerability CVE-2025-49125 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:47:00.125685+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:47:00.125685+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-55752 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-55752" }, "action_statement": "Vulnerability CVE-2025-55752 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2025-66614 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2025-66614" }, "action_statement": "Vulnerability CVE-2025-66614 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-24733 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-24733" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-24880 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-24880" }, "action_statement": "Vulnerability CVE-2026-24880 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-25854 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-25854" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-29145 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-29145" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-29146 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-29146" }, "action_statement": "Vulnerability CVE-2026-29146 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-32990 does not affect version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket. not_affected \u2014 Target version 10.1.33 is NOT AFFECTED by CVE-2026-32990. The vulnerable code pattern (the checkSni method with improper protocol hostname normalization) does not exist in this version. The vulnerability was introduced in later versions (10.1.50-10.1.52) when the strict SNI validation feature was added via CVE-2025-66614's fix, and the incomplete normalization in that new code created CVE-2026-...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2026-32990" }, "impact_statement": "not_affected \u2014 Target version 10.1.33 is NOT AFFECTED by CVE-2026-32990. The vulnerable code pattern (the checkSni method with improper protocol hostname normalization) does not exist in this version. The vulnerability was introduced in later versions (10.1.50-10.1.52) when the strict SNI validation feature was added via CVE-2025-66614's fix, and the incomplete normalization in that new code created CVE-2026-..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-34483 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-34483" }, "action_statement": "Vulnerability CVE-2026-34483 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-34487 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-34487" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-34500 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-34500" }, "action_statement": "Vulnerability CVE-2026-34500 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-41284 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-41284" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-41293 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-41293" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-42498 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-42498" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-43512 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43512" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-23T21:50:56.656209+00:00", "status_notes": "Vulnerability CVE-2026-53434 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-53434" }, "action_statement": "Vulnerability CVE-2026-53434 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-65182 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-65182" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:46:51.248735+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1", "identifiers": { "purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.1.33-tuxcare.1" } } ], "timestamp": "2026-10-22T10:48:00.134099+00:00", "status_notes": "Vulnerability CVE-2026-68525 is fixed in version 10.1.33-tuxcare.1 of org.apache.tomcat.embed:tomcat-embed-websocket.", "vulnerability": { "name": "CVE-2026-68525" } } ] }