UnratedFix available
TuxCare security update for 32 packages (16 CVEs)
Type: advisorySources: OSV
TuxCare rebuilt 32 packages to address 16 CVEs. Fixed in 7.0.70-tuxcare.4.
- Products
- org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat.embed:tomcat-embed-el, org.apache.tomcat.embed:tomcat-embed-jasper, org.apache.tomcat.embed:tomcat-embed-logging-juli, org.apache.tomcat.embed:tomcat-embed-logging-log4j, org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat.extras:tomcat-extras-juli, org.apache.tomcat.extras:tomcat-extras-juli-adapters, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-annotations-api, org.apache.tomcat:tomcat-api, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat-catalina-ant, org.apache.tomcat:tomcat-catalina-ha, org.apache.tomcat:tomcat-catalina-jmx-remote, org.apache.tomcat:tomcat-catalina-ws, org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat-dbcp, org.apache.tomcat:tomcat-el-api, org.apache.tomcat:tomcat-i18n-es, org.apache.tomcat:tomcat-i18n-fr, org.apache.tomcat:tomcat-i18n-ja, org.apache.tomcat:tomcat-jasper, org.apache.tomcat:tomcat-jasper-el, org.apache.tomcat:tomcat-jdbc, org.apache.tomcat:tomcat-jsp-api, org.apache.tomcat:tomcat-juli, org.apache.tomcat:tomcat-servlet-api, org.apache.tomcat:tomcat-tribes, org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-websocket-api, org.apache.tomcat:tomcat7-websocket
- Affected versions
- 7.0.70, 7.0.70-tuxcare.1, 7.0.70-tuxcare.2, 7.0.70-tuxcare.3
- Fixed versions
- 7.0.70-tuxcare.4
- CVEs
- CVE-2016-6796, CVE-2016-6816, CVE-2017-12615, CVE-2017-12616, CVE-2017-5647, CVE-2017-5664, CVE-2018-11784, CVE-2018-1304, CVE-2018-1305, CVE-2018-8014, CVE-2019-0221, CVE-2019-12418, CVE-2019-2684, CVE-2020-13935, CVE-2023-24998, CVE-2023-28708
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 30 Oct 2026, 16:55 UTC · Revision 1
Source evidence
TuxCare security update for 32 packages (16 CVEs)
core-osv · Original sourcePublished 17 Sept 2026, 20:32 UTC
TuxCare rebuilt 32 packages to address 16 CVEs. Fixed in 7.0.70-tuxcare.4.
osv:CLSA-2026-1789677164
org.apache.tomcat.embed:tomcat-embed-core
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-el
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-jasper
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-logging-juli
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-logging-log4j
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.embed:tomcat-embed-websocket
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.extras:tomcat-extras-juli
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat.extras:tomcat-extras-juli-adapters
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-annotations-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-catalina
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-catalina-ant
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-catalina-ha
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-catalina-jmx-remote
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-catalina-ws
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-coyote
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-dbcp
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-el-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-i18n-es
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-i18n-fr
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-i18n-ja
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-jasper
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-jasper-el
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-jdbc
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-jsp-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-juli
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-servlet-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-tribes
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-util
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat-websocket-api
Fixed versions: 7.0.70-tuxcare.4
org.apache.tomcat:tomcat7-websocket
Fixed versions: 7.0.70-tuxcare.4
Complete source record
{
"id": "5f2950cf728c06be42b6d21ad73eb1112d2358f168ec42a6f646b9253523ac6c",
"url": "https://osv.dev/vulnerability/CLSA-2026-1789677164",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "TuxCare security update for 32 packages (16 CVEs)",
"summary": "TuxCare rebuilt 32 packages to address 16 CVEs. Fixed in 7.0.70-tuxcare.4.",
"evidence": "osv:CLSA-2026-1789677164",
"products": [
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-core",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/0/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/0/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/0/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-el",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/1/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/1/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/1/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-jasper",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/2/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/2/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/2/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-logging-juli",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/3/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/3/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/3/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-logging-log4j",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/4/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/4/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/4/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.embed:tomcat-embed-websocket",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/5/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/5/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/5/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.extras:tomcat-extras-juli",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/6/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/6/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/6/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat.extras:tomcat-extras-juli-adapters",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/7/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/7/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/7/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/8/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/8/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/8/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/8/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-annotations-api",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/9/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/9/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/9/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/9/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-api",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/10/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/10/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/10/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/10/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/11/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/11/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/11/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/11/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-ant",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/12/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/12/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/12/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/12/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-ha",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/13/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/13/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/13/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/13/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-jmx-remote",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/14/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/14/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/14/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/14/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-catalina-ws",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/15/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/15/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/15/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/15/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-coyote",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/16/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/16/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/16/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/16/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-dbcp",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/17/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/17/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/17/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/17/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-el-api",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/18/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/18/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/18/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/18/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-es",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/19/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/19/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/19/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/19/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-fr",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/20/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/20/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/20/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/20/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-i18n-ja",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/21/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/21/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/21/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/21/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jasper",
"evidence": "/affected/22/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/22/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/22/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/22/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/22/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/22/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jasper-el",
"evidence": "/affected/23/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/23/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/23/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/23/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/23/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/23/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jdbc",
"evidence": "/affected/24/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/24/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/24/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/24/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/24/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/24/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-jsp-api",
"evidence": "/affected/25/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/25/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/25/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/25/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/25/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/25/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-juli",
"evidence": "/affected/26/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/26/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/26/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/26/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/26/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/26/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-servlet-api",
"evidence": "/affected/27/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/27/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/27/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/27/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/27/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/27/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-tribes",
"evidence": "/affected/28/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/28/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/28/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/28/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/28/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/28/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-util",
"evidence": "/affected/29/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/29/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/29/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/29/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/29/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/29/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat-websocket-api",
"evidence": "/affected/30/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/30/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/30/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/30/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/30/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/30/versions"
}
]
},
{
"name": {
"value": "org.apache.tomcat:tomcat7-websocket",
"evidence": "/affected/31/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "7.0.70-tuxcare.4",
"evidence": "/affected/31/ranges"
}
],
"affected_versions": [
{
"value": "7.0.70",
"evidence": "/affected/31/versions"
},
{
"value": "7.0.70-tuxcare.1",
"evidence": "/affected/31/versions"
},
{
"value": "7.0.70-tuxcare.2",
"evidence": "/affected/31/versions"
},
{
"value": "7.0.70-tuxcare.3",
"evidence": "/affected/31/versions"
}
]
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1789677164",
"aliases": [
"CLSA-2026-1789677164"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-core",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-el",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-jasper",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-jasper",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-logging-juli",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-logging-juli",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-logging-log4j",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-logging-log4j",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.embed:tomcat-embed-websocket",
"purl": "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.extras:tomcat-extras-juli",
"purl": "pkg:maven/org.apache.tomcat.extras/tomcat-extras-juli",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat.extras:tomcat-extras-juli-adapters",
"purl": "pkg:maven/org.apache.tomcat.extras/tomcat-extras-juli-adapters",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat",
"purl": "pkg:maven/org.apache.tomcat/tomcat",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-annotations-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-annotations-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-ant",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ant",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-ha",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ha",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-jmx-remote",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-jmx-remote",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-catalina-ws",
"purl": "pkg:maven/org.apache.tomcat/tomcat-catalina-ws",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-coyote",
"purl": "pkg:maven/org.apache.tomcat/tomcat-coyote",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-dbcp",
"purl": "pkg:maven/org.apache.tomcat/tomcat-dbcp",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-el-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-el-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-es",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-es",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-fr",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-fr",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-i18n-ja",
"purl": "pkg:maven/org.apache.tomcat/tomcat-i18n-ja",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jasper",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jasper",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jasper-el",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jasper-el",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jdbc",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jdbc",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-jsp-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-jsp-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-juli",
"purl": "pkg:maven/org.apache.tomcat/tomcat-juli",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-servlet-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-servlet-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-tribes",
"purl": "pkg:maven/org.apache.tomcat/tomcat-tribes",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-util",
"purl": "pkg:maven/org.apache.tomcat/tomcat-util",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat-websocket-api",
"purl": "pkg:maven/org.apache.tomcat/tomcat-websocket-api",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "7.0.70"
},
{
"fixed": "7.0.70-tuxcare.4"
}
]
}
],
"package": {
"name": "org.apache.tomcat:tomcat7-websocket",
"purl": "pkg:maven/org.apache.tomcat/tomcat7-websocket",
"ecosystem": "TuxCare:Maven"
},
"versions": [
"7.0.70",
"7.0.70-tuxcare.1",
"7.0.70-tuxcare.2",
"7.0.70-tuxcare.3"
],
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789677164.json",
"tuxcare": {
"base_version": "7.0.70",
"fixed_version": "7.0.70-tuxcare.4"
}
}
}
],
"modified": "2026-10-15T09:47:44.399297734Z",
"provider": "osv",
"upstream": [
"CVE-2016-6796",
"CVE-2016-6816",
"CVE-2017-12615",
"CVE-2017-12616",
"CVE-2017-5647",
"CVE-2017-5664",
"CVE-2018-11784",
"CVE-2018-1304",
"CVE-2018-1305",
"CVE-2018-8014",
"CVE-2019-0221",
"CVE-2019-12418",
"CVE-2019-2684",
"CVE-2020-13935",
"CVE-2023-24998",
"CVE-2023-28708"
],
"references": []
},
"related_cves": [
{
"value": "CVE-2016-6796",
"evidence": "/upstream"
},
{
"value": "CVE-2016-6816",
"evidence": "/upstream"
},
{
"value": "CVE-2017-12615",
"evidence": "/upstream"
},
{
"value": "CVE-2017-12616",
"evidence": "/upstream"
},
{
"value": "CVE-2017-5647",
"evidence": "/upstream"
},
{
"value": "CVE-2017-5664",
"evidence": "/upstream"
},
{
"value": "CVE-2018-11784",
"evidence": "/upstream"
},
{
"value": "CVE-2018-1304",
"evidence": "/upstream"
},
{
"value": "CVE-2018-1305",
"evidence": "/upstream"
},
{
"value": "CVE-2018-8014",
"evidence": "/upstream"
},
{
"value": "CVE-2019-0221",
"evidence": "/upstream"
},
{
"value": "CVE-2019-12418",
"evidence": "/upstream"
},
{
"value": "CVE-2019-2684",
"evidence": "/upstream"
},
{
"value": "CVE-2020-13935",
"evidence": "/upstream"
},
{
"value": "CVE-2023-24998",
"evidence": "/upstream"
},
{
"value": "CVE-2023-28708",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 328580,
"published_at": "2026-09-17T20:32:44+00:00"
}