{ "@id": "urn:uuid:f6185ea0-2da1-4324-ae80-5d3cdefa2e66", "role": "Document Creator", "author": "https://tuxcare.com", "version": 27, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-29T04:08:51.772780+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2016-0762 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-0762" }, "action_statement": "Vulnerability CVE-2016-0762 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2016-5018 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-5018" }, "action_statement": "Vulnerability CVE-2016-5018 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-5388 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-5388" }, "action_statement": "Vulnerability CVE-2016-5388 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2016-6794 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-6794" }, "action_statement": "Vulnerability CVE-2016-6794 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2016-6796 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-6796" }, "action_statement": "Vulnerability CVE-2016-6796 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2016-6797 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-6797" }, "action_statement": "Vulnerability CVE-2016-6797 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-6816 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-6816" }, "action_statement": "Vulnerability CVE-2016-6816 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-8735 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-8735" }, "action_statement": "Vulnerability CVE-2016-8735 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2016-8745 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2016-8745" }, "action_statement": "Vulnerability CVE-2016-8745 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2017-12615 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-12615" }, "action_statement": "Vulnerability CVE-2017-12615 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T04:08:51.772780+00:00", "status_notes": "Vulnerability CVE-2017-12616 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-12616" }, "action_statement": "Vulnerability CVE-2017-12616 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2017-12617 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-12617" }, "action_statement": "Vulnerability CVE-2017-12617 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2017-5647 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-5647" }, "action_statement": "Vulnerability CVE-2017-5647 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2017-5648 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-5648" }, "action_statement": "Vulnerability CVE-2017-5648 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2017-5664 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-5664" }, "action_statement": "Vulnerability CVE-2017-5664 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T02:36:49.908127+00:00", "status_notes": "Vulnerability CVE-2017-7674 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2017-7674" }, "action_statement": "Vulnerability CVE-2017-7674 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2018-11784 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-11784" }, "action_statement": "Vulnerability CVE-2018-11784 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2018-1304 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-1304" }, "action_statement": "Vulnerability CVE-2018-1304 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:41:42.084809+00:00", "status_notes": "Vulnerability CVE-2018-1305 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-1305" }, "action_statement": "Vulnerability CVE-2018-1305 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2018-1336 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-1336" }, "action_statement": "Vulnerability CVE-2018-1336 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2018-8014 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-8014" }, "action_statement": "Vulnerability CVE-2018-8014 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2018-8034 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-8034" }, "action_statement": "Vulnerability CVE-2018-8034 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T00:51:30.888148+00:00", "status_notes": "Vulnerability CVE-2018-8037 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2018-8037" }, "action_statement": "Vulnerability CVE-2018-8037 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-0199 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-0199" }, "action_statement": "Vulnerability CVE-2019-0199 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:37:14.382670+00:00", "status_notes": "Vulnerability CVE-2019-0221 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-0221" }, "action_statement": "Vulnerability CVE-2019-0221 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2019-0232 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-0232" }, "action_statement": "Vulnerability CVE-2019-0232 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2019-10072 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-10072" }, "action_statement": "Vulnerability CVE-2019-10072 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2019-12418 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-12418" }, "action_statement": "Vulnerability CVE-2019-12418 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:28:44.006786+00:00", "status_notes": "Vulnerability CVE-2019-17563 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2019-17563" }, "action_statement": "Vulnerability CVE-2019-17563 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-11996 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2020-11996" }, "action_statement": "Vulnerability CVE-2020-11996 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-13934 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-13934" }, "impact_statement": "CVE-2020-13934 affects Apache Tomcat 9.0.0.M5-9.0.36" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-13935 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2020-13935" }, "action_statement": "Vulnerability CVE-2020-13935 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-13943 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. Fix for CVE-202-13943 for this version has been already backported by the original developers, so brunch 9.0.90 is not vulnerable", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-13943" }, "impact_statement": "Fix for CVE-202-13943 for this version has been already backported by the original developers, so brunch 9.0.90 is not vulnerable" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2020-17527 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2020-17527" }, "action_statement": "Vulnerability CVE-2020-17527 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-1935 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2020-1935" }, "action_statement": "Vulnerability CVE-2020-1935 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2020-1938 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2020-1938" }, "action_statement": "Vulnerability CVE-2020-1938 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2020-9484 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2020-9484" }, "impact_statement": "Fix already present in baseline since 9.0.35. Verified in java/org/apache/catalina/session/FileStore.java:303 \u2014 canonicalFile.toPath().startsWith(storageDir.getCanonicalFile().toPath()) containment check is in place. Advisory range 9.0.0.M1-9.0.34; 9.0.90 is well past the fix." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-24122 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. CVE-2021-24122 affects Apache Tomcat 9.0.0.M1-9.0.39", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-24122" }, "impact_statement": "CVE-2021-24122 affects Apache Tomcat 9.0.0.M1-9.0.39" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T00:08:54.384014+00:00", "status_notes": "Vulnerability CVE-2021-25122 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-25122" }, "action_statement": "Vulnerability CVE-2021-25122 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:33:09.807961+00:00", "status_notes": "Vulnerability CVE-2021-25329 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-25329" }, "action_statement": "Vulnerability CVE-2021-25329 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2021-30639 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-30639" }, "action_statement": "Vulnerability CVE-2021-30639 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2021-30640 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-30640" }, "action_statement": "Vulnerability CVE-2021-30640 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:22:31.131193+00:00", "status_notes": "Vulnerability CVE-2021-33037 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-33037" }, "action_statement": "Vulnerability CVE-2021-33037 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2021-41079 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-41079" }, "action_statement": "Vulnerability CVE-2021-41079 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2021-42340 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. Patches already applied: 31d62426645824bdfe076a0c0eafa904d90b4fb9 (already in target via 80f1438ec4 'Close WebConnection', a37a6d312c 'Fix BZ 68884 - improve handling of large scale WebSocket disconnects')", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2021-42340" }, "impact_statement": "Patches already applied: 31d62426645824bdfe076a0c0eafa904d90b4fb9 (already in target via 80f1438ec4 'Close WebConnection', a37a6d312c 'Fix BZ 68884 - improve handling of large scale WebSocket disconnects')" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:19:00.657885+00:00", "status_notes": "Vulnerability CVE-2021-43980 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2021-43980" }, "action_statement": "Vulnerability CVE-2021-43980 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:19:00.657885+00:00", "status_notes": "Vulnerability CVE-2022-23181 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2022-23181" }, "action_statement": "Vulnerability CVE-2022-23181 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2022-25762 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2022-25762" }, "action_statement": "Vulnerability CVE-2022-25762 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:16:19.887305+00:00", "status_notes": "Vulnerability CVE-2022-29885 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2022-29885" }, "action_statement": "Vulnerability CVE-2022-29885 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-34305 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2022-34305" }, "action_statement": "Vulnerability CVE-2022-34305 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:12:12.887949+00:00", "status_notes": "Vulnerability CVE-2022-42252 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2022-42252" }, "action_statement": "Vulnerability CVE-2022-42252 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2022-45143 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. 9.0.90 is not vulnerable, as it is\u00a0outside affected range ( >= 9.0.40, < 9.0.69 )", "vulnerability": { "name": "CVE-2022-45143" }, "impact_statement": "9.0.90 is not vulnerable, as it is\u00a0outside affected range ( >= 9.0.40, < 9.0.69 )" }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:11:34.688190+00:00", "status_notes": "Vulnerability CVE-2023-24998 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-24998" }, "action_statement": "Vulnerability CVE-2023-24998 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:16:19.887305+00:00", "status_notes": "Vulnerability CVE-2023-28708 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-28708" }, "action_statement": "Vulnerability CVE-2023-28708 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T01:46:20.750358+00:00", "status_notes": "Vulnerability CVE-2023-28709 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-28709" }, "action_statement": "Vulnerability CVE-2023-28709 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T21:07:35.663971+00:00", "status_notes": "Vulnerability CVE-2023-41080 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-41080" }, "action_statement": "Vulnerability CVE-2023-41080 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:40:55.741562+00:00", "status_notes": "Vulnerability CVE-2023-42794 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. not_affected \u2014 CVE-2023-42794 affects Tomcat 9.0.70-9.0.80 and 8.5.85-8.5.93. The target is version 9.0.90, which already contains the upstream fix. The vulnerability involved missing automatic cleanup of temporary upload files when application code failed to close file streams, potentially leading to disk exhaustion DoS. The fix adds a finalize() method to DiskFileItem that deletes temporary files during gar...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42794" }, "impact_statement": "not_affected \u2014 CVE-2023-42794 affects Tomcat 9.0.70-9.0.80 and 8.5.85-8.5.93. The target is version 9.0.90, which already contains the upstream fix. The vulnerability involved missing automatic cleanup of temporary upload files when application code failed to close file streams, potentially leading to disk exhaustion DoS. The fix adds a finalize() method to DiskFileItem that deletes temporary files during gar..." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:21:18.934330+00:00", "status_notes": "Vulnerability CVE-2023-42795 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. not_affected \u2014 CVE-2023-42795 affects Apache Tomcat versions 9.0.0-M1 through 9.0.80 due to incomplete cleanup during recycling of internal objects. The target version 9.0.90 already contains the upstream fix (commit 44d05d75d6 by Mark Thomas from October 2023) that was shipped in the Apache Tomcat 9.0.81+ release. All vulnerable patterns have been addressed: part.delete(), session.endAccess(), asyncContext.r...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-42795" }, "impact_statement": "not_affected \u2014 CVE-2023-42795 affects Apache Tomcat versions 9.0.0-M1 through 9.0.80 due to incomplete cleanup during recycling of internal objects. The target version 9.0.90 already contains the upstream fix (commit 44d05d75d6 by Mark Thomas from October 2023) that was shipped in the Apache Tomcat 9.0.81+ release. All vulnerable patterns have been addressed: part.delete(), session.endAccess(), asyncContext.r..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2023-44487 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-44487" }, "action_statement": "Vulnerability CVE-2023-44487 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T19:07:12.211534+00:00", "status_notes": "Vulnerability CVE-2023-45648 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. not_affected \u2014 Target version 9.0.90 is NOT AFFECTED by CVE-2023-45648. The vulnerable pattern (lack of trailer header validation) does not exist in this version. The upstream Apache Tomcat 9.0.90 release (May 2024) included an architectural refactoring that introduced HttpHeaderParser - a common header parser with built-in validation that prevents the vulnerability. The required defenses (rejecting non-token...", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2023-45648" }, "impact_statement": "not_affected \u2014 Target version 9.0.90 is NOT AFFECTED by CVE-2023-45648. The vulnerable pattern (lack of trailer header validation) does not exist in this version. The upstream Apache Tomcat 9.0.90 release (May 2024) included an architectural refactoring that introduced HttpHeaderParser - a common header parser with built-in validation that prevents the vulnerability. The required defenses (rejecting non-token..." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:14:49.853815+00:00", "status_notes": "Vulnerability CVE-2023-46589 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2023-46589" }, "action_statement": "Vulnerability CVE-2023-46589 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T23:59:58.436178+00:00", "status_notes": "Vulnerability CVE-2024-21733 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-21733" }, "action_statement": "Vulnerability CVE-2024-21733 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-23672 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-23672" }, "action_statement": "Vulnerability CVE-2024-23672 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-24549 does not affect version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es. CVE-2024-24549 is NOT present in Apache Tomcat 9.0.90. The vulnerability (delayed HTTP/2 header validation causing DoS) was fixed by upstream Apache in version 9.0.86 via commit 8e03be9f26 (authored by Mark Thomas, markt@apache.org). Version 9.0.90 inherited this fix from the upstream release. Code inspection confirms the fix is fully applied: readHeadersFrame() and readContinuationFrame() both call validateHeaders() immediately after processing each frame, and the delayed validation in onHeadersComplete() has been removed. TuxCare backported this CVE to older versions (9.0.83, 9.0.75, 10.1.18) but no backport was needed for 9.0.90 as it already contained the upstream fix.", "justification": "vulnerable_code_not_present", "vulnerability": { "name": "CVE-2024-24549" }, "impact_statement": "CVE-2024-24549 is NOT present in Apache Tomcat 9.0.90. The vulnerability (delayed HTTP/2 header validation causing DoS) was fixed by upstream Apache in version 9.0.86 via commit 8e03be9f26 (authored by Mark Thomas, markt@apache.org). Version 9.0.90 inherited this fix from the upstream release. Code inspection confirms the fix is fully applied: readHeadersFrame() and readContinuationFrame() both call validateHeaders() immediately after processing each frame, and the delayed validation in onHeadersComplete() has been removed. TuxCare backported this CVE to older versions (9.0.83, 9.0.75, 10.1.18) but no backport was needed for 9.0.90 as it already contained the upstream fix." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-34750 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-34750" }, "action_statement": "Vulnerability CVE-2024-34750 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-28T18:12:53.572239+00:00", "status_notes": "Vulnerability CVE-2024-38286 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-38286" }, "action_statement": "Vulnerability CVE-2024-38286 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-50379 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-50379" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-52316 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-52316" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-54677 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-54677" }, "action_statement": "Vulnerability CVE-2024-54677 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2024-56337 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2024-56337" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-24813 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-24813" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-31650 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-31650" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-31651 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-31651" }, "action_statement": "Vulnerability CVE-2025-31651 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-46701 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-46701" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48988 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-48988" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-48989 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-48989" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49124 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-49124" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-49125 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.8.", "vulnerability": { "name": "CVE-2025-49125" }, "action_statement": "Vulnerability CVE-2025-49125 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.8." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52434 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.3.", "vulnerability": { "name": "CVE-2025-52434" }, "action_statement": "Vulnerability CVE-2025-52434 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.3." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-52520 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-52520" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-53506 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-53506" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55668 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-55668" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55752 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-55752" }, "action_statement": "Vulnerability CVE-2025-55752 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-55754 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-55754" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-61795 is fixed in version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2025-61795" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2025-66614 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.4.", "vulnerability": { "name": "CVE-2025-66614" }, "action_statement": "Vulnerability CVE-2025-66614 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24733 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.4.", "vulnerability": { "name": "CVE-2026-24733" }, "action_statement": "Vulnerability CVE-2026-24733 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.4." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24734 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-24734" }, "action_statement": "Vulnerability CVE-2026-24734 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-24880 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.7.", "vulnerability": { "name": "CVE-2026-24880" }, "action_statement": "Vulnerability CVE-2026-24880 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-25854 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5.", "vulnerability": { "name": "CVE-2026-25854" }, "action_statement": "Vulnerability CVE-2026-25854 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-29145 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-29145" }, "action_statement": "Vulnerability CVE-2026-29145 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-29146 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5.", "vulnerability": { "name": "CVE-2026-29146" }, "action_statement": "Vulnerability CVE-2026-29146 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-32990 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-32990" }, "action_statement": "Vulnerability CVE-2026-32990 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34483 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.6.", "vulnerability": { "name": "CVE-2026-34483" }, "action_statement": "Vulnerability CVE-2026-34483 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.6." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34486 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5.", "vulnerability": { "name": "CVE-2026-34486" }, "action_statement": "Vulnerability CVE-2026-34486 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.5." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-34487 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.7.", "vulnerability": { "name": "CVE-2026-34487" }, "action_statement": "Vulnerability CVE-2026-34487 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es, and is fixed in 9.0.90-tuxcare.7." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41284 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-41284" }, "action_statement": "Vulnerability CVE-2026-41284 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-41293 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-41293" }, "action_statement": "Vulnerability CVE-2026-41293 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-42498 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-42498" }, "action_statement": "Vulnerability CVE-2026-42498 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43512 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-43512" }, "action_statement": "Vulnerability CVE-2026-43512 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43513 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-43513" }, "action_statement": "Vulnerability CVE-2026-43513 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43514 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-43514" }, "action_statement": "Vulnerability CVE-2026-43514 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-43515 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-43515" }, "action_statement": "Vulnerability CVE-2026-43515 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-23T21:50:56.656209+00:00", "status_notes": "Vulnerability CVE-2026-53434 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-53434" }, "action_statement": "Vulnerability CVE-2026-53434 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65182 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-65182" }, "action_statement": "Vulnerability CVE-2026-65182 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-10-29T00:29:56.875680+00:00", "status_notes": "Vulnerability CVE-2026-65637 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-65637" }, "action_statement": "Vulnerability CVE-2026-65637 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-65905 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-65905" }, "action_statement": "Vulnerability CVE-2026-65905 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." }, { "status": "affected", "products": [ { "@id": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2", "identifiers": { "purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es@9.0.90-tuxcare.2" } } ], "timestamp": "2026-09-24T09:31:26.931840+00:00", "status_notes": "Vulnerability CVE-2026-68525 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es.", "vulnerability": { "name": "CVE-2026-68525" }, "action_statement": "Vulnerability CVE-2026-68525 affects version 9.0.90-tuxcare.2 of org.apache.tomcat:tomcat-i18n-es." } ] }