Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tomcat/tomcat@9.0.116
Typemaven
Namespaceorg.apache.tomcat
Nametomcat
Version9.0.116
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version9.0.118
Latest_non_vulnerable_version11.0.22
Affected_by_vulnerabilities
0
url VCID-1mms-9rqw-xqhq
vulnerability_id VCID-1mms-9rqw-xqhq
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34483
reference_id
reference_type
scores
0
value 0.00091
scoring_system epss
scoring_elements 0.25733
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34483
1
reference_url https://github.com/apache/tomcat/commit/97566842589d0b80de138ca719378861fd017d68
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/97566842589d0b80de138ca719378861fd017d68
2
reference_url https://github.com/apache/tomcat/commit/f22dc2ce6cfda8609ed86816c0d78e1a9cbadb06
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/f22dc2ce6cfda8609ed86816c0d78e1a9cbadb06
3
reference_url https://github.com/apache/tomcat/commit/f9ddc24fcfcdfaea4a6953198d8636aca3e957bc
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/f9ddc24fcfcdfaea4a6953198d8636aca3e957bc
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
reference_id CVE-2026-34483
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34483
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-34483
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1mms-9rqw-xqhq
1
url VCID-3e3b-6dse-s3gf
vulnerability_id VCID-3e3b-6dse-s3gf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29146
reference_id
reference_type
scores
0
value 0.12919
scoring_system epss
scoring_elements 0.94176
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29146
1
reference_url https://github.com/apache/tomcat/commit/0112ed22abfccc3d54e44d91eb08804d0886acd1
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/0112ed22abfccc3d54e44d91eb08804d0886acd1
2
reference_url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
3
reference_url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
4
reference_url https://github.com/apache/tomcat/commit/607ebc0fa522bd9e8c05517baa2d179bbd1e659c
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/607ebc0fa522bd9e8c05517baa2d179bbd1e659c
5
reference_url https://github.com/apache/tomcat/commit/6d955cceca841f2eabf2d6c46b59a8c7e1cd6eaa
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/6d955cceca841f2eabf2d6c46b59a8c7e1cd6eaa
6
reference_url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29146
reference_id CVE-2026-29146
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29146
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
3
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
4
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-29146
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3e3b-6dse-s3gf
2
url VCID-aug4-yyp5-37f8
vulnerability_id VCID-aug4-yyp5-37f8
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34486
reference_id
reference_type
scores
0
value 0.0168
scoring_system epss
scoring_elements 0.82489
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34486
1
reference_url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
2
reference_url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
3
reference_url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34486
reference_id CVE-2026-34486
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34486
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-34486
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-aug4-yyp5-37f8
3
url VCID-jz35-ynpa-sqfq
vulnerability_id VCID-jz35-ynpa-sqfq
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34487
reference_id
reference_type
scores
0
value 0.00091
scoring_system epss
scoring_elements 0.25733
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34487
1
reference_url https://github.com/apache/tomcat/commit/301bc6efbf72feb14dacfdfa3f50372182736150
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/301bc6efbf72feb14dacfdfa3f50372182736150
2
reference_url https://github.com/apache/tomcat/commit/5eff2a773b8b728083e5195b3183df1b9e12a03d
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/5eff2a773b8b728083e5195b3183df1b9e12a03d
3
reference_url https://github.com/apache/tomcat/commit/f593292a082e5ef9336a8db2b4b522f7f3e36976
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/f593292a082e5ef9336a8db2b4b522f7f3e36976
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
reference_id CVE-2026-34487
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34487
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-34487
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jz35-ynpa-sqfq
4
url VCID-up1n-hunu-rkak
vulnerability_id VCID-up1n-hunu-rkak
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-34500
reference_id
reference_type
scores
0
value 0.00202
scoring_system epss
scoring_elements 0.42219
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-34500
1
reference_url https://github.com/apache/tomcat/commit/29b56a56ce9e7d044b6162a99af0f38529b3a208
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/29b56a56ce9e7d044b6162a99af0f38529b3a208
2
reference_url https://github.com/apache/tomcat/commit/c13e60e732ea6d07087293a41ad1866c20848271
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/c13e60e732ea6d07087293a41ad1866c20848271
3
reference_url https://github.com/apache/tomcat/commit/ff589ab26e8250a2ca4286d986305318c033ff9f
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/ff589ab26e8250a2ca4286d986305318c033ff9f
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34500
reference_id CVE-2026-34500
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34500
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-34500
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-up1n-hunu-rkak
Fixing_vulnerabilities
0
url VCID-3e3b-6dse-s3gf
vulnerability_id VCID-3e3b-6dse-s3gf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29146
reference_id
reference_type
scores
0
value 0.12919
scoring_system epss
scoring_elements 0.94176
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29146
1
reference_url https://github.com/apache/tomcat/commit/0112ed22abfccc3d54e44d91eb08804d0886acd1
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/0112ed22abfccc3d54e44d91eb08804d0886acd1
2
reference_url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/1fab40ccc752e22639eccfe290d5624afad7eccd
3
reference_url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/55f3eb9148233054fccfdf761141c6894a050be1
4
reference_url https://github.com/apache/tomcat/commit/607ebc0fa522bd9e8c05517baa2d179bbd1e659c
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/607ebc0fa522bd9e8c05517baa2d179bbd1e659c
5
reference_url https://github.com/apache/tomcat/commit/6d955cceca841f2eabf2d6c46b59a8c7e1cd6eaa
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/6d955cceca841f2eabf2d6c46b59a8c7e1cd6eaa
6
reference_url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/776e12b3e2b0b4507b8a3b62c187ceb0b74bf418
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29146
reference_id CVE-2026-29146
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29146
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@9.0.117
purl pkg:maven/org.apache.tomcat/tomcat@9.0.117
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.117
2
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
3
url pkg:maven/org.apache.tomcat/tomcat@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat@10.1.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.54
4
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
5
url pkg:maven/org.apache.tomcat/tomcat@11.0.21
purl pkg:maven/org.apache.tomcat/tomcat@11.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4qzp-up1c-2kfq
1
vulnerability VCID-5j78-np3z-rfda
2
vulnerability VCID-9ptv-guzs-kyg1
3
vulnerability VCID-c8b5-23zz-cudd
4
vulnerability VCID-dk5d-3ebq-yfbn
5
vulnerability VCID-kxvn-6xbg-4fep
6
vulnerability VCID-pmx1-hkph-4qhd
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.21
aliases CVE-2026-29146
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3e3b-6dse-s3gf
1
url VCID-8btx-vpre-pugb
vulnerability_id VCID-8btx-vpre-pugb
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-66614
reference_id
reference_type
scores
0
value 0.00051
scoring_system epss
scoring_elements 0.1634
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-66614
1
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
url https://github.com/apache/tomcat
2
reference_url https://github.com/apache/tomcat/commit/021d1f833e38b683a44688f7b28f1f27e8e37c36
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/021d1f833e38b683a44688f7b28f1f27e8e37c36
3
reference_url https://github.com/apache/tomcat/commit/152c14885d45f5e0a8b59bd9f93c289cfe20ce30
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/152c14885d45f5e0a8b59bd9f93c289cfe20ce30
4
reference_url https://github.com/apache/tomcat/commit/258a591b61f8cf5c22109e21e5a2a38b63454fd2
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/258a591b61f8cf5c22109e21e5a2a38b63454fd2
5
reference_url https://github.com/apache/tomcat/commit/4d0615a5c718c260d6d4e0b944a050f09a490c02
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/4d0615a5c718c260d6d4e0b944a050f09a490c02
6
reference_url https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/5053fa82a1b2b52756810601227984a8b71888a4
7
reference_url https://github.com/apache/tomcat/commit/9276b5e783c8cd5b3fe2bb716306b65004bdd940
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/9276b5e783c8cd5b3fe2bb716306b65004bdd940
8
reference_url https://github.com/apache/tomcat/commit/95f7778248cac46d03e6af04de9c72a598be3a53
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/95f7778248cac46d03e6af04de9c72a598be3a53
9
reference_url https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/972f9a5e2a07674d92610c478aac1b205d60724e
10
reference_url https://github.com/apache/tomcat/commit/a4aa74232e826028cd2f7ba0445caf8a8b52c509
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/a4aa74232e826028cd2f7ba0445caf8a8b52c509
11
reference_url https://lists.apache.org/thread/vw6lxtlh2qbqwpb61wd3sv1flm2nttw7
reference_id
reference_type
scores
url https://lists.apache.org/thread/vw6lxtlh2qbqwpb61wd3sv1flm2nttw7
12
reference_url https://tomcat.apache.org/security-10.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-10.html
13
reference_url https://tomcat.apache.org/security-11.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-11.html
14
reference_url https://tomcat.apache.org/security-9.html
reference_id
reference_type
scores
url https://tomcat.apache.org/security-9.html
15
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
reference_id CVE-2025-66614
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-66614
16
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-66614
reference_id CVE-2025-66614
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2025-66614
17
reference_url https://github.com/advisories/GHSA-fpj8-gq4v-p354
reference_id GHSA-fpj8-gq4v-p354
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fpj8-gq4v-p354
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.113
purl pkg:maven/org.apache.tomcat/tomcat@9.0.113
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8btx-vpre-pugb
1
vulnerability VCID-keyp-7fnn-cbh8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.113
1
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
2
url pkg:maven/org.apache.tomcat/tomcat@10.1.50
purl pkg:maven/org.apache.tomcat/tomcat@10.1.50
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8btx-vpre-pugb
1
vulnerability VCID-keyp-7fnn-cbh8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.50
3
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
4
url pkg:maven/org.apache.tomcat/tomcat@11.0.15
purl pkg:maven/org.apache.tomcat/tomcat@11.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-8btx-vpre-pugb
1
vulnerability VCID-keyp-7fnn-cbh8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.15
5
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2025-66614, GHSA-fpj8-gq4v-p354
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8btx-vpre-pugb
2
url VCID-bqkn-zvm1-4kd6
vulnerability_id VCID-bqkn-zvm1-4kd6
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-24880
reference_id
reference_type
scores
0
value 0.0024
scoring_system epss
scoring_elements 0.47205
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-24880
1
reference_url https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/1b586d6aa8ae65726da5fa8799427b5d4718478a
2
reference_url https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/1e71441a15972f56e661b0b549fb9e5d838b83bb
3
reference_url https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/2cb06c34f661ca42f7570bbcc21e99806184bcc5
4
reference_url https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/6d478dbe18b7c4bb671c30fedf130309b0dab77c
5
reference_url https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/f07df938d00f7419b40fa65aa912966d0efac522
6
reference_url https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/fde1a8235fb73125217bd41e162aa0a113f33552
7
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
reference_id CVE-2026-24880
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-24880
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2026-24880
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bqkn-zvm1-4kd6
3
url VCID-ek4k-3m72-qqbf
vulnerability_id VCID-ek4k-3m72-qqbf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29145
reference_id
reference_type
scores
0
value 0.00039
scoring_system epss
scoring_elements 0.11909
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29145
1
reference_url https://github.com/apache/tomcat/commit/721591f7bff424c693f26adc18ae9b9abac3655b
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/721591f7bff424c693f26adc18ae9b9abac3655b
2
reference_url https://github.com/apache/tomcat/commit/d1406df5ae0326f39f54c3f64ac30d8fca55cd5b
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/d1406df5ae0326f39f54c3f64ac30d8fca55cd5b
3
reference_url https://github.com/apache/tomcat/commit/fe26667cd2385045ac73f4dea086cc9971209b90
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/fe26667cd2385045ac73f4dea086cc9971209b90
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
reference_id CVE-2026-29145
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29145
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2026-29145
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ek4k-3m72-qqbf
4
url VCID-keyp-7fnn-cbh8
vulnerability_id VCID-keyp-7fnn-cbh8
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-32990
reference_id
reference_type
scores
0
value 0.00208
scoring_system epss
scoring_elements 0.43145
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-32990
1
reference_url https://github.com/apache/tomcat/commit/021d1f833e38b683a44688f7b28f1f27e8e37c36
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/021d1f833e38b683a44688f7b28f1f27e8e37c36
2
reference_url https://github.com/apache/tomcat/commit/4d0615a5c718c260d6d4e0b944a050f09a490c02
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/4d0615a5c718c260d6d4e0b944a050f09a490c02
3
reference_url https://github.com/apache/tomcat/commit/95f7778248cac46d03e6af04de9c72a598be3a53
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/95f7778248cac46d03e6af04de9c72a598be3a53
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
reference_id CVE-2026-32990
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-32990
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2026-32990
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-keyp-7fnn-cbh8
5
url VCID-rx6f-x5cc-6bef
vulnerability_id VCID-rx6f-x5cc-6bef
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-25854
reference_id
reference_type
scores
0
value 0.00033
scoring_system epss
scoring_elements 0.10247
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-25854
1
reference_url https://github.com/apache/tomcat/commit/4c5d306001b780c9316aea5ff6502c524fb20695
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/4c5d306001b780c9316aea5ff6502c524fb20695
2
reference_url https://github.com/apache/tomcat/commit/5fb910f9a9dafa37a0c0965a1bd62a21dcf437f2
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/5fb910f9a9dafa37a0c0965a1bd62a21dcf437f2
3
reference_url https://github.com/apache/tomcat/commit/c5a45ae68d07f7a07be2a875e5b6772d66c4e5d0
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/c5a45ae68d07f7a07be2a875e5b6772d66c4e5d0
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
reference_id CVE-2026-25854
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-25854
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2026-25854
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rx6f-x5cc-6bef
6
url VCID-thj9-c3nq-f3ax
vulnerability_id VCID-thj9-c3nq-f3ax
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-29129
reference_id
reference_type
scores
0
value 0.00033
scoring_system epss
scoring_elements 0.10165
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-29129
1
reference_url https://github.com/apache/tomcat/commit/5cfa876d73f1ff5f4dc8309c4320f684cbeff74e
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/5cfa876d73f1ff5f4dc8309c4320f684cbeff74e
2
reference_url https://github.com/apache/tomcat/commit/6db238562ec36ab1106db4d04843f8b33e7a0c06
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/6db238562ec36ab1106db4d04843f8b33e7a0c06
3
reference_url https://github.com/apache/tomcat/commit/8d69b33764dba81dce89e3a768de6093a35620ae
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/8d69b33764dba81dce89e3a768de6093a35620ae
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29129
reference_id CVE-2026-29129
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29129
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@9.0.116
purl pkg:maven/org.apache.tomcat/tomcat@9.0.116
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116
1
url pkg:maven/org.apache.tomcat/tomcat@10.1.53
purl pkg:maven/org.apache.tomcat/tomcat@10.1.53
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.53
2
url pkg:maven/org.apache.tomcat/tomcat@11.0.20
purl pkg:maven/org.apache.tomcat/tomcat@11.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mms-9rqw-xqhq
1
vulnerability VCID-3e3b-6dse-s3gf
2
vulnerability VCID-aug4-yyp5-37f8
3
vulnerability VCID-jz35-ynpa-sqfq
4
vulnerability VCID-up1n-hunu-rkak
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.20
aliases CVE-2026-29129
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-thj9-c3nq-f3ax
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.116