Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0RC1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.0.0RC1
Tags Ghost
Next non-vulnerable version 8.5.99
Latest non-vulnerable version 11.0.8
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-b2z1-15m4-aaac
Aliases:
CVE-2018-1336
GHSA-m59c-jpc8-m2x4
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
8.0.51
Affected by 13 other vulnerabilities.
8.5.31
Affected by 34 other vulnerabilities.
9.0.8
Affected by 36 other vulnerabilities.
VCID-cp4z-y57s-aaah
Aliases:
CVE-2018-8014
GHSA-r4x2-3cq5-hqvp
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
8.0.53
Affected by 10 other vulnerabilities.
8.5.32
Affected by 31 other vulnerabilities.
9.0.9
Affected by 1 other vulnerability.
9.0.10
Affected by 33 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-09-17T22:01:57.810148+00:00 GHSA Importer Affected by VCID-cp4z-y57s-aaah https://github.com/advisories/GHSA-r4x2-3cq5-hqvp 34.0.1
2024-09-17T22:01:47.872895+00:00 GHSA Importer Affected by VCID-b2z1-15m4-aaac https://github.com/advisories/GHSA-m59c-jpc8-m2x4 34.0.1
2024-04-23T17:40:16.599154+00:00 GHSA Importer Affected by VCID-cp4z-y57s-aaah https://github.com/advisories/GHSA-r4x2-3cq5-hqvp 34.0.0rc4
2024-04-23T17:40:15.083881+00:00 GHSA Importer Affected by VCID-b2z1-15m4-aaac https://github.com/advisories/GHSA-m59c-jpc8-m2x4 34.0.0rc4
2024-01-03T17:36:48.221492+00:00 GHSA Importer Affected by VCID-cp4z-y57s-aaah https://github.com/advisories/GHSA-r4x2-3cq5-hqvp 34.0.0rc1
2024-01-03T17:36:39.183286+00:00 GHSA Importer Affected by VCID-b2z1-15m4-aaac https://github.com/advisories/GHSA-m59c-jpc8-m2x4 34.0.0rc1