Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.48
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.48
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-767j-jfh2-jvrc
Aliases:
CVE-2019-17569
Potential HTTP request smuggling in Apache Tomcat The refactoring present in Apache Tomcat versions 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 …
8.5.51
Vulnerable
GHSA-hh3j-x4mc-g48r
Aliases:
CVE-2019-12418
Insufficiently Protected Credentials in Apache Tomcat When Apache Tomcat 9.0.0.M1 to 9.0.28, 8.5.0 to 8.5.47, 7.0.0 and 7.0.97 is configured …
8.5.49
Vulnerable
This package is not known to fix any advisories.