An open index of dependabot pull requests across open source projects.

org.apache.tomcat.embed:tomcat-embed-core

Ecosystem:
maven
Package URL:
pkg:maven/org.apache.tomcat.embed:tomcat-embed-core
Total PRs:
726 Dependabot PRs
Latest PR:
10 days ago
Unique Repositories:
274 repositories
Unique Repos (30 days):
11 repositories
Security Advisories
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
GHSA-pjfr-qf3p-3q25 CVE-2017-12615 HIGH published over 7 years ago • updated 1 day ago
When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default...
Apache Tomcat Cross-site scripting (XSS) vulnerability
GHSA-f98p-9pp6-7q6c CVE-2008-1947 MODERATE published about 4 years ago • updated 9 days ago
Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary...
Apache Tomcat - Digest authenticator will authenticate any unknown user
GHSA-h6fc-48rj-7qqh CVE-2026-43512 CRITICAL published 18 days ago • updated about 10 hours ago
Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 Apache Tomcat 9.0.0.M1 to 9.0.117 Older, unsupported versi...
Apache Tomcat - HTTP/2 request headers not validated
GHSA-r29c-68gh-xp6x CVE-2026-41293 CRITICAL published 18 days ago • updated about 10 hours ago
Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 Apache Tomcat 9.0.0.M1 to 9.0.117 Older, unsupported versi...
Expected Behavior Violation in Apache Tomcat
GHSA-9hg2-395j-83rm CVE-2017-5651 CRITICAL published about 4 years ago • updated 22 days ago
In Apache Tomcat 9.0.0.M1 to 9.0.0.M18 and 8.5.0 to 8.5.12, the refactoring of the HTTP connectors introduced a regression in the send file process...
Recent PRs
Package Details
Name: org.apache.tomcat.embed:tomcat-embed-core
Ecosystem: maven
PURL Type: maven
Package URL: pkg:maven/org.apache.tomcat.embed:tomcat-embed-core
JSON API: View JSON
Security Advisories

57

Active advisories
CRITICAL 7
HIGH 27
MODERATE 18
LOW 5
View All maven Advisories
Package Information
Description:

Core Tomcat implementation

Repository:
Homepage: https://tomcat.apache.org/
Latest Release: 11.0.1
over 1 year ago
Dependent Repos: 14,197
Dependent Packages: 1,044
Ranking: Top 0.0609% by dependent repos Top 0.0709% by dependent pkgs
PR Status
Open 299 (41.2%)
Merged 113 (15.6%)
Closed 250 (34.4%)
PR Types
Major 81 (11.2%)
Minor 5 (0.7%)
Patch 576 (79.3%)