GHSA-vfww-5hm6-hx2j
Critical · 9.6CVSS
9.6
EPSS
—
Published
Oct 27, 2025
CISA due date
—
The record
Apache Tomcat Vulnerable to Improper Neutralization of Escape, Meta, or Control Sequences
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | org.apache.tomcat.embed:tomcat-embed-core | 10.1.0-M1 | 10.1.45 |
| Maven | org.apache.tomcat.embed:tomcat-embed-core | 11.0.0-M1 | 11.0.11 |
| Maven | org.apache.tomcat.embed:tomcat-embed-core | 8.5.60 | No fix |
| Maven | org.apache.tomcat.embed:tomcat-embed-core | 9.0.40 | 9.0.109 |
| Maven | org.apache.tomcat:tomcat | 10.1.0-M1 | 10.1.45 |
| Maven | org.apache.tomcat:tomcat | 11.0.0-M1 | 11.0.11 |
| Maven | org.apache.tomcat:tomcat | 8.5.60 | No fix |
| Maven | org.apache.tomcat:tomcat | 9.0.40 | 9.0.109 |
| Maven | org.apache.tomcat:tomcat-catalina | 10.1.0-M1 | 10.1.45 |
| Maven | org.apache.tomcat:tomcat-catalina | 11.0.0-M1 | 11.0.11 |
| Maven | org.apache.tomcat:tomcat-catalina | 8.5.60 | No fix |
| Maven | org.apache.tomcat:tomcat-catalina | 9.0.40 | 9.0.109 |
| Bitnami | tomcat | 0 | 9.0.109 |
| Chainguard | camunda-zeebe-8.6 | 0 | 8.6.29-r2 |
| Chainguard | camunda-zeebe-8.6-compat | 0 | 8.6.29-r2 |
| Chainguard | camunda-zeebe-8.7 | 0 | 8.7.16-r1 |
| Chainguard | camunda-zeebe-8.7-compat | 0 | 8.7.16-r1 |
| Chainguard | kayenta-2025.0 | 0 | 2025.0.8-r3 |
| Chainguard | kayenta-2025.1 | 0 | 2025.1.5-r3 |
| Chainguard | kayenta-2025.2 | 0 | 2025.2.2-r3 |
| Chainguard | kayenta-fips-2025.0 | 0 | 2025.0.8-r3 |
| Chainguard | kayenta-fips-2025.1 | 0 | 2025.1.6-r0 |
| Chainguard | kayenta-fips-2025.2 | 0 | 2025.2.2-r3 |
| Chainguard | seata | 0 | 2.5.0-r3 |
| Chainguard | seata-namingserver | 0 | 2.5.0-r3 |
| Chainguard | seata-namingserver-oci-entrypoint | 0 | 2.5.0-r3 |
| Chainguard | seata-openjdk-17-compat | 0 | 2.5.0-r3 |
| Chainguard | seata-openjdk-21-compat | 0 | 2.5.0-r3 |
| Chainguard | seata-openjdk-8-compat | 0 | 2.5.0-r3 |
| Chainguard | seata-server | 0 | 2.5.0-r3 |
| Chainguard | seata-server-oci-entrypoint | 0 | 2.5.0-r3 |
| maven | org.apache.tomcat.embed/tomcat-embed-core | 10.1.0-M1 | 10.1.45 |
| maven | org.apache.tomcat.embed/tomcat-embed-core | 11.0.0-M1 | 11.0.11 |
| maven | org.apache.tomcat.embed/tomcat-embed-core | 8.5.60 | No fix |
| maven | org.apache.tomcat.embed/tomcat-embed-core | 9.0.40 | 9.0.109 |
| maven | org.apache.tomcat/tomcat | 10.1.0-M1 | 10.1.45 |
| maven | org.apache.tomcat/tomcat | 11.0.0-M1 | 11.0.11 |
| maven | org.apache.tomcat/tomcat | 8.5.60 | No fix |
| maven | org.apache.tomcat/tomcat | 9.0.40 | 9.0.109 |
| maven | org.apache.tomcat/tomcat-catalina | 10.1.0-M1 | 10.1.45 |
| maven | org.apache.tomcat/tomcat-catalina | 11.0.0-M1 | 11.0.11 |
| maven | org.apache.tomcat/tomcat-catalina | 8.5.60 | No fix |
| maven | org.apache.tomcat/tomcat-catalina | 9.0.40 | 9.0.109 |
Related vulnerabilities
- CVE-2025-55754 Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache… Same vulnerability
- CVE-2026-24733 Improper Input Validation vulnerability in Apache Tomcat. Also affects org.apache.tomcat.embed:tomcat-embed-core
- CVE-2025-66614 Improper Input Validation vulnerability. Also affects org.apache.tomcat.embed:tomcat-embed-core
- GHSA-wmwf-9ccg-fff5 Apache Tomcat Vulnerable to Relative Path Traversal Also affects org.apache.tomcat.embed:tomcat-embed-core
- CVE-2025-61795 Improper Resource Shutdown or Release vulnerability in Apache Tomcat. Also affects org.apache.tomcat.embed:tomcat-embed-core
- CVE-2025-55752 Relative Path Traversal vulnerability in Apache Tomcat. Also affects org.apache.tomcat.embed:tomcat-embed-core
- CVE-2025-48989 Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat… Also affects org.apache.tomcat.embed:tomcat-embed-core
- CVE-2025-49124 Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. Also affects org.apache.tomcat.embed:tomcat-embed-core