UnratedFix available
TuxCare security update for 38 packages (3 CVEs)
Type: advisorySources: OSV
TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.46-tuxcare.4.
- Products
- org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.experimental:tomcat-embed-programmatic, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-annotations-api, org.apache.tomcat:tomcat-api, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina-ant, org.apache.tomcat:tomcat-catalina-ha, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-dbcp, org.apache.tomcat:tomcat-el-api, org.apache.tomcat:tomcat-i18n-cs, org.apache.tomcat:tomcat-i18n-de, org.apache.tomcat:tomcat-i18n-es, org.apache.tomcat:tomcat-i18n-fr, org.apache.tomcat:tomcat-i18n-ja, org.apache.tomcat:tomcat-i18n-ko, org.apache.tomcat:tomcat-i18n-pt-BR, org.apache.tomcat:tomcat-i18n-ru, org.apache.tomcat:tomcat-i18n-zh-CN, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper-el, org.apache.tomcat:tomcat-jaspic-api, org.apache.tomcat:tomcat-jdbc, org.apache.tomcat:tomcat-jni, org.apache.tomcat:tomcat-jsp-api, org.apache.tomcat:tomcat-juli, org.apache.tomcat:tomcat-servlet-api, org.apache.tomcat:tomcat-ssi, org.apache.tomcat:tomcat-storeconfig, org.apache.tomcat:tomcat-tribes, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-util-scan, org.apache.tomcat:tomcat-websocket, org.apache.tomcat:tomcat-websocket-api
- Affected versions
- 9.0.46, 9.0.46-tuxcare.1, 9.0.46-tuxcare.2, 9.0.46-tuxcare.3
- Fixed versions
- 9.0.46-tuxcare.4
- CVEs
- CVE-2025-48988, CVE-2026-29146, CVE-2026-34486
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 16:13 UTC · Revision 1
Source evidence
TuxCare security update for 38 packages (3 CVEs)
core-osv · Original sourcePublished 4 Aug 2026, 14:52 UTC
TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.46-tuxcare.4.
osv:CLSA-2026-1776386110
org.apache.tomcat.embed:tomcat-embed-core
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-el
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-jasper
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-websocket
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat.experimental:tomcat-embed-programmatic
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-annotations-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-catalina
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-catalina-ant
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-catalina-ha
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-coyote
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-dbcp
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-el-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-cs
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-de
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-es
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-fr
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-ja
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-ko
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-pt-BR
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-ru
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-i18n-zh-CN
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jasper
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jasper-el
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jaspic-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jdbc
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jni
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-jsp-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-juli
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-servlet-api
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-ssi
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-storeconfig
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-tribes
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-util
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-util-scan
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-websocket
Fixed versions: 9.0.46-tuxcare.4
org.apache.tomcat:tomcat-websocket-api
Fixed versions: 9.0.46-tuxcare.4
Complete source record
{
"id": "ff45ac6809012a95f0edf60b2697475f3e52913bc1affaaa9b581ba29afe7b14",
"url": "https://osv.dev/vulnerability/CLSA-2026-1776386110",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "TuxCare security update for 38 packages (3 CVEs)",
"summary": "TuxCare rebuilt 38 packages to address 3 CVEs. Fixed in 9.0.46-tuxcare.4.",
"evidence": "osv:CLSA-2026-1776386110",
"products": [
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-core",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/0/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/0/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/0/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-el",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/1/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/1/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/1/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-jasper",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/2/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/2/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/2/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-websocket",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/3/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/3/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/3/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.experimental:tomcat-embed-programmatic",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/4/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/4/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/4/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/5/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/5/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/5/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-annotations-api",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/6/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/6/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/6/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-api",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/7/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/7/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/7/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/8/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/8/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/8/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-ant",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/9/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/9/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/9/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-ha",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/10/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/10/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/10/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-coyote",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/11/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/11/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/11/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-dbcp",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/12/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/12/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/12/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-el-api",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/13/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/13/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/13/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/13/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-cs",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/14/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/14/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/14/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/14/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-de",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/15/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/15/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/15/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/15/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-es",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/16/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/16/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/16/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/16/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-fr",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/17/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/17/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/17/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/17/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-ja",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/18/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/18/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/18/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/18/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-ko",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/19/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/19/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/19/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/19/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-pt-BR",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/20/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/20/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/20/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/20/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-ru",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/21/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/21/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/21/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/21/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-zh-CN",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/22/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/22/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/22/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/22/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jasper",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/23/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/23/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/23/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/23/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jasper-el",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/24/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/24/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/24/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/24/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jaspic-api",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/25/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/25/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/25/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/25/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jdbc",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/26/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/26/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/26/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/26/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jni",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/27/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/27/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/27/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/27/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jsp-api",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/28/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/28/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/28/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/28/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-juli",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/29/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/29/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/29/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/29/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-servlet-api",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/30/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/30/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/30/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/30/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-ssi",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/31/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/31/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/31/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/31/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-storeconfig",
"evidence": "/affected/32/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/32/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/32/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/32/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/32/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/32/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-tribes",
"evidence": "/affected/33/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/33/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/33/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/33/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/33/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/33/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-util",
"evidence": "/affected/34/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/34/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/34/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/34/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/34/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/34/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-util-scan",
"evidence": "/affected/35/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/35/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/35/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/35/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/35/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/35/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-websocket",
"evidence": "/affected/36/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/36/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/36/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/36/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/36/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/36/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-websocket-api",
"evidence": "/affected/37/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "9.0.46-tuxcare.4",
"evidence": "/affected/37/ranges"
}
],
"affected_versions": [
{
"value": "9.0.46",
"evidence": "/affected/37/versions"
},
{
"value": "9.0.46-tuxcare.1",
"evidence": "/affected/37/versions"
},
{
"value": "9.0.46-tuxcare.2",
"evidence": "/affected/37/versions"
},
{
"value": "9.0.46-tuxcare.3",
"evidence": "/affected/37/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1776386110",
"aliases": [
"CLSA-2026-1776386110"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-core",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-el",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-jasper",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-websocket",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.experimental:tomcat-embed-programmatic",
"purl": "pkg:maven/org.apache.tomcat.experimental/tomcat-embed-programmatic",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat",
"purl": "pkg:maven/org.apache.tomcat/tomcat",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-annotations-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-annotations-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-ant",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-ha",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-coyote",
"purl": "pkg:maven/org.apache.tomcat/tomcat-coyote",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-dbcp",
"purl": "pkg:maven/org.apache.tomcat/tomcat-dbcp",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-el-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-el-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-cs",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-cs",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-de",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-de",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-es",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-fr",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-fr",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-ja",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-ko",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ko",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-pt-BR",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-pt-BR",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-ru",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ru",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-zh-CN",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-zh-CN",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jasper",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jasper",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jasper-el",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jasper-el",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jaspic-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jaspic-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jdbc",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jdbc",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jni",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jni",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jsp-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jsp-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-juli",
"purl": "pkg:maven/org.apache.tomcat/tomcat-juli",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-servlet-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-ssi",
"purl": "pkg:maven/org.apache.tomcat/tomcat-ssi",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-storeconfig",
"purl": "pkg:maven/org.apache.tomcat/tomcat-storeconfig",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-tribes",
"purl": "pkg:maven/org.apache.tomcat/tomcat-tribes",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-util",
"purl": "pkg:maven/org.apache.tomcat/tomcat-util",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-util-scan",
"purl": "pkg:maven/org.apache.tomcat/tomcat-util-scan",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-websocket",
"purl": "pkg:maven/org.apache.tomcat/tomcat-websocket",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "9.0.46"
},
{
"fixed": "9.0.46-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-websocket-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-websocket-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"9.0.46",
"9.0.46-tuxcare.1",
"9.0.46-tuxcare.2",
"9.0.46-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1776386110.json",
"tuxcare": {
"base_version": "9.0.46",
"fixed_version": "9.0.46-tuxcare.4"
}
}
}
],
"modified": "2026-10-15T09:47:15.861208273Z",
"provider": "osv",
"upstream": [
"CVE-2025-48988",
"CVE-2026-29146",
"CVE-2026-34486"
],
"references": []
},
"related_cves": [
{
"value": "CVE-2025-48988",
"evidence": "/upstream"
},
{
"value": "CVE-2026-29146",
"evidence": "/upstream"
},
{
"value": "CVE-2026-34486",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 327231,
"published_at": "2026-08-04T14:52:26+00:00"
}