An open index of dependabot pull requests across open source projects.

org.apache.tomcat.embed:tomcat-embed-core

Ecosystem:
maven
Package URL:
pkg:maven/org.apache.tomcat.embed:tomcat-embed-core
Total PRs:
727 Dependabot PRs
Latest PR:
17 days ago
Unique Repositories:
275 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Apache Tomcat improperly escapes input from JsonErrorReportValve
GHSA-rq2w-37h9-vg94 CVE-2022-45143 HIGH published over 3 years ago • updated 9 days ago
The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 does not escape the `type`, `message` or `description`...
Exposure of Resource to Wrong Sphere in Apache Tomcat
GHSA-3vx3-xf6q-r5xp CVE-2017-5648 CRITICAL published about 4 years ago • updated 4 days ago
While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.0.M17, 8.5.0 to 8.5.11, 8.0...
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
GHSA-j39c-c8hj-x4j3 CVE-2021-25122 HIGH published about 5 years ago • updated about 16 hours ago
When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate ...
Apache Tomcat OS Command Injection vulnerability
GHSA-8vmx-qmch-mpqg CVE-2019-0232 HIGH published over 7 years ago • updated about 16 hours ago
When running on Windows with enableCmdLineArguments enabled, the CGI Servlet in Apache Tomcat 9.0.0.M1 to 9.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0....
Apache Tomcat - CGI security constraint bypass
GHSA-h2fw-rfh5-95r3 CVE-2025-46701 LOW published about 1 year ago • updated 1 day ago
Improper Handling of Case Sensitivity vulnerability in Apache Tomcat's GCI servlet allows security constraint bypass of security constraints that a...
Recent PRs
Package Details
Name: org.apache.tomcat.embed:tomcat-embed-core
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.apache.tomcat.embed:tomcat-embed-core
JSON API: View JSON
Security Advisories

56

Active advisories
CRITICAL 7
HIGH 26
MODERATE 19
LOW 4
View All maven Advisories
Package Information
Description:

Core Tomcat implementation

Repository:
Homepage: https://tomcat.apache.org/
Latest Release: 11.0.1
over 1 year ago
Dependent Repos: 14,197
Dependent Packages: 1,044
Ranking: Top 0.0609% by dependent repos Top 0.0709% by dependent pkgs
PR Status
Open 300 (41.3%)
Merged 113 (15.5%)
Closed 250 (34.4%)
PR Types
Major 81 (11.1%)
Minor 5 (0.7%)
Patch 577 (79.4%)