[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-25854":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":24,"aliases":25,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":60,"related":61,"reserved_at":9,"published_at":75,"modified_at":76,"state":77,"summary":78,"references_raw":87,"kevs":127,"epss":128,"epss_history":131,"metrics":406,"affected":423},"CVE-2026-25854","Occasional URL redirection to untrusted Site ('Open Redirect') vulnerability in Apache Tomcat via the LoadBalancerDrainingValve.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M1 through 10.1.52, from 9.0.0.M23 through 9.0.115, from 8.5.30 through 8.5.100.\nOther, unsupported versions may also be affected\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-601","URL Redirection to Untrusted Site ('Open Redirect')","The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.","weakness","Draft","Base","Low",[20],{"id":21,"name":22,"techniques":23},"CAPEC-178","Cross-Site Flashing",[],[],[26,27,28,29],"GHSA-9m3c-qcxr-9x87","BIT-tomcat-2026-25854","UBUNTU-CVE-2026-25854","DEBIAN-CVE-2026-25854",[],[32,34,36,38,40,42,44,46,48,50,52,54,55,56,58],{"_key":33},"OPENSUSE-SU-2026:10547-1",{"_key":35},"OPENSUSE-SU-2026:10548-1",{"_key":37},"OPENSUSE-SU-2026:10549-1",{"_key":39},"MGASA-2026-0095",{"_key":41},"OPENSUSE-SU-2026:20595-1",{"_key":43},"SUSE-SU-2026:1572-1",{"_key":45},"SUSE-SU-2026:1558-1",{"_key":47},"OPENSUSE-SU-2026:20611-1",{"_key":49},"OPENSUSE-SU-2026:20612-1",{"_key":51},"SUSE-SU-2026:1604-1",{"_key":53},"SUSE-SU-2026:1603-1",{"_key":29},{"_key":28},{"_key":57},"RHSA-2026:20405",{"_key":59},"RHSA-2026:36790",[],[62,63,64,65,66,67,68,69,70,71,72,73],{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":74},"CGA-CRPX-2GF3-6J5X","2026-04-09T19:13:13.529Z","2026-04-10T18:22:34.359Z","Analyzed",{"cisa_kev":79,"cisa_ransomware":79,"cisa_vendor":9,"epss_severity":80,"epss_score":81,"severity":82,"severity_score":83,"severity_version":84,"severity_source":85,"severity_vector":86,"severity_status":77},false,"low",0.00526,"medium",6.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",[88,99,104,109,114,118,122],{"url":89,"sources":90,"tags":94},"https://lists.apache.org/thread/ghct3b6o74bp2vm7q875s1zh0dqrz3h0",[85,91,92,93],"nvd","osv_maven","osv_ubuntu",[95,96,97,98],"Vendor Advisory","WEB","Mailing List","REPORT",{"url":100,"sources":101,"tags":102},"http://www.openwall.com/lists/oss-security/2026/04/09/21",[85,91,92,93],[96,97,103,98],"Third Party Advisory",{"url":105,"sources":106,"tags":107},"https://nvd.nist.gov/vuln/detail/CVE-2026-25854",[92],[108],"Advisory",{"url":110,"sources":111,"tags":112},"https://github.com/apache/tomcat",[92],[113],"PACKAGE",{"url":115,"sources":116,"tags":117},"https://ubuntu.com/security/CVE-2026-25854",[93],[98],{"url":119,"sources":120,"tags":121},"https://www.cve.org/CVERecord?id=CVE-2026-25854",[93],[98],{"url":123,"sources":124,"tags":126},"https://security-tracker.debian.org/tracker/CVE-2026-25854",[125],"osv_debian",[108],[],{"date":129,"score":81,"percentile":130},"2026-08-22",0.42447,[132,136,140,143,146,149,153,156,160,163,166,169,172,175,178,181,184,187,190,193,196,199,202,205,208,211,214,217,220,223,226,229,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,353,356,359,362,365,368,371,374,377,380,383,386,389,392,395,398,401,403],{"date":133,"score":134,"percentile":135},"2026-04-10",0.00005,0.00277,{"date":137,"score":138,"percentile":139},"2026-04-11",0.00009,0.00834,{"date":141,"score":138,"percentile":142},"2026-04-12",0.00828,{"date":144,"score":138,"percentile":145},"2026-04-13",0.00829,{"date":147,"score":138,"percentile":148},"2026-04-14",0.00823,{"date":150,"score":151,"percentile":152},"2026-04-15",0.00026,0.07228,{"date":154,"score":151,"percentile":155},"2026-04-16",0.07234,{"date":157,"score":158,"percentile":159},"2026-04-17",0.00035,0.10406,{"date":161,"score":158,"percentile":162},"2026-04-18",0.10375,{"date":164,"score":158,"percentile":165},"2026-04-19",0.1034,{"date":167,"score":158,"percentile":168},"2026-04-20",0.10331,{"date":170,"score":158,"percentile":171},"2026-04-21",0.10503,{"date":173,"score":158,"percentile":174},"2026-04-22",0.10531,{"date":176,"score":158,"percentile":177},"2026-04-23",0.10555,{"date":179,"score":158,"percentile":180},"2026-04-24",0.10487,{"date":182,"score":158,"percentile":183},"2026-04-25",0.10517,{"date":185,"score":158,"percentile":186},"2026-04-26",0.10485,{"date":188,"score":158,"percentile":189},"2026-04-27",0.10462,{"date":191,"score":158,"percentile":192},"2026-04-28",0.10426,{"date":194,"score":158,"percentile":195},"2026-04-29",0.10425,{"date":197,"score":158,"percentile":198},"2026-04-30",0.10417,{"date":200,"score":158,"percentile":201},"2026-05-01",0.10413,{"date":203,"score":158,"percentile":204},"2026-05-02",0.10446,{"date":206,"score":158,"percentile":207},"2026-05-03",0.10431,{"date":209,"score":158,"percentile":210},"2026-05-04",0.10387,{"date":212,"score":158,"percentile":213},"2026-05-05",0.10373,{"date":215,"score":151,"percentile":216},"2026-05-06",0.0733,{"date":218,"score":151,"percentile":219},"2026-05-07",0.07455,{"date":221,"score":151,"percentile":222},"2026-05-08",0.07472,{"date":224,"score":151,"percentile":225},"2026-05-09",0.07524,{"date":227,"score":151,"percentile":228},"2026-05-10",0.07525,{"date":230,"score":231,"percentile":232},"2026-05-11",0.00033,0.09793,{"date":234,"score":231,"percentile":235},"2026-05-12",0.0983,{"date":237,"score":231,"percentile":238},"2026-05-13",0.09845,{"date":240,"score":231,"percentile":241},"2026-05-14",0.09897,{"date":243,"score":231,"percentile":244},"2026-05-15",0.09889,{"date":246,"score":231,"percentile":247},"2026-05-16",0.09906,{"date":249,"score":231,"percentile":250},"2026-05-17",0.09885,{"date":252,"score":231,"percentile":253},"2026-05-18",0.09842,{"date":255,"score":231,"percentile":256},"2026-05-19",0.09796,{"date":258,"score":231,"percentile":259},"2026-05-20",0.0979,{"date":261,"score":231,"percentile":262},"2026-05-21",0.09764,{"date":264,"score":231,"percentile":265},"2026-05-22",0.10023,{"date":267,"score":231,"percentile":268},"2026-05-23",0.1002,{"date":270,"score":231,"percentile":271},"2026-05-24",0.10016,{"date":273,"score":231,"percentile":274},"2026-05-25",0.09999,{"date":276,"score":231,"percentile":277},"2026-05-26",0.09986,{"date":279,"score":231,"percentile":280},"2026-05-27",0.10053,{"date":282,"score":231,"percentile":283},"2026-05-28",0.10222,{"date":285,"score":231,"percentile":286},"2026-05-29",0.10257,{"date":288,"score":231,"percentile":289},"2026-05-30",0.10247,{"date":291,"score":231,"percentile":292},"2026-05-31",0.10228,{"date":294,"score":231,"percentile":295},"2026-06-01",0.10207,{"date":297,"score":231,"percentile":298},"2026-06-02",0.10201,{"date":300,"score":231,"percentile":301},"2026-06-03",0.1017,{"date":303,"score":231,"percentile":304},"2026-06-04",0.10185,{"date":306,"score":231,"percentile":307},"2026-06-05",0.1023,{"date":309,"score":231,"percentile":310},"2026-06-06",0.10251,{"date":312,"score":231,"percentile":313},"2026-06-07",0.10215,{"date":315,"score":231,"percentile":316},"2026-06-08",0.10128,{"date":318,"score":231,"percentile":319},"2026-06-09",0.10165,{"date":321,"score":231,"percentile":322},"2026-06-10",0.10202,{"date":324,"score":231,"percentile":325},"2026-06-11",0.10241,{"date":327,"score":231,"percentile":328},"2026-06-12",0.1029,{"date":330,"score":231,"percentile":331},"2026-06-13",0.10295,{"date":333,"score":231,"percentile":334},"2026-06-14",0.10276,{"date":336,"score":81,"percentile":337},"2026-06-15",0.40128,{"date":339,"score":81,"percentile":340},"2026-06-16",0.40183,{"date":342,"score":81,"percentile":343},"2026-06-17",0.40261,{"date":345,"score":81,"percentile":346},"2026-06-18",0.40308,{"date":348,"score":81,"percentile":349},"2026-06-19",0.403,{"date":351,"score":81,"percentile":352},"2026-06-20",0.40292,{"date":354,"score":81,"percentile":355},"2026-06-21",0.40277,{"date":357,"score":81,"percentile":358},"2026-06-22",0.4027,{"date":360,"score":81,"percentile":361},"2026-06-23",0.40347,{"date":363,"score":81,"percentile":364},"2026-06-24",0.40385,{"date":366,"score":81,"percentile":367},"2026-06-25",0.40464,{"date":369,"score":81,"percentile":370},"2026-06-26",0.40507,{"date":372,"score":81,"percentile":373},"2026-06-27",0.40543,{"date":375,"score":81,"percentile":376},"2026-06-28",0.4053,{"date":378,"score":81,"percentile":379},"2026-06-29",0.40532,{"date":381,"score":81,"percentile":382},"2026-06-30",0.40499,{"date":384,"score":81,"percentile":385},"2026-07-01",0.40595,{"date":387,"score":81,"percentile":388},"2026-07-02",0.4063,{"date":390,"score":81,"percentile":391},"2026-07-03",0.40649,{"date":393,"score":81,"percentile":394},"2026-07-04",0.40673,{"date":396,"score":81,"percentile":397},"2026-07-05",0.40688,{"date":399,"score":81,"percentile":400},"2026-07-06",0.40695,{"date":402,"score":81,"percentile":400},"2026-07-07",{"date":404,"score":81,"percentile":405},"2026-07-08",0.40709,[407,412,414,419,421],{"source":85,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":408,"cvss_v4_0":9},{"baseScore":83,"baseSeverity":409,"vectorString":86,"impactScore":410,"exploitabilityScore":411},"MEDIUM",4.5,7.2,{"source":91,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":413,"cvss_v4_0":9},{"baseScore":83,"baseSeverity":409,"vectorString":86,"impactScore":410,"exploitabilityScore":411},{"source":92,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":415,"cvss_v4_0":416},{"baseScore":83,"baseSeverity":9,"vectorString":86,"impactScore":410,"exploitabilityScore":411},{"baseScore":417,"baseSeverity":9,"vectorString":418,"impactScore":9,"exploitabilityScore":9},6.9,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N",{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":420,"cvss_v4_0":9},{"baseScore":83,"baseSeverity":9,"vectorString":86,"impactScore":410,"exploitabilityScore":411},{"source":125,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":422,"cvss_v4_0":9},{"baseScore":83,"baseSeverity":9,"vectorString":86,"impactScore":410,"exploitabilityScore":411},[424,448,477,493,502,513,521,525,529,535,549,557],{"ecosystem":9,"name":425,"vendor":426,"product":427,"cpe_part":428,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":429},"Apache Tomcat","apache software foundation","apache tomcat","a",[430,436,440,444],{"version":431,"is_range":432,"range_type":85,"version_start":433,"version_start_type":434,"version_end":435,"version_end_type":434,"fixed_in":9},">= 11.0.0-M1, \u003C= 11.0.18",true,"11.0.0-M1","including","11.0.18",{"version":437,"is_range":432,"range_type":85,"version_start":438,"version_start_type":434,"version_end":439,"version_end_type":434,"fixed_in":9},">= 10.1.0-M1, \u003C= 10.1.52","10.1.0-M1","10.1.52",{"version":441,"is_range":432,"range_type":85,"version_start":442,"version_start_type":434,"version_end":443,"version_end_type":434,"fixed_in":9},">= 9.0.0.M23, \u003C= 9.0.115","9.0.0.M23","9.0.115",{"version":445,"is_range":432,"range_type":85,"version_start":446,"version_start_type":434,"version_end":447,"version_end_type":434,"fixed_in":9},">= 8.5.30, \u003C= 8.5.100","8.5.30","8.5.100",{"ecosystem":9,"name":449,"vendor":450,"product":451,"cpe_part":428,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":452},"Tomcat","apache","tomcat",[453,459,463,467,469,471,473,475],{"version":454,"is_range":432,"range_type":455,"version_start":456,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},"gte9.0.1_lt9.0.116","cpe","9.0.1","9.0.116","excluding",{"version":460,"is_range":432,"range_type":455,"version_start":461,"version_start_type":434,"version_end":462,"version_end_type":458,"fixed_in":9},"gte10.1.0_lt10.1.53","10.1.0","10.1.53",{"version":464,"is_range":432,"range_type":455,"version_start":465,"version_start_type":434,"version_end":466,"version_end_type":458,"fixed_in":9},"gte11.0.0_lt11.0.20","11.0.0","11.0.20",{"version":468,"is_range":79,"range_type":455,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone23",{"version":470,"is_range":79,"range_type":455,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone24",{"version":472,"is_range":79,"range_type":455,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone25",{"version":474,"is_range":79,"range_type":455,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone26",{"version":476,"is_range":79,"range_type":455,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone27",{"ecosystem":478,"name":479,"vendor":480,"product":479,"cpe_part":9,"purl_type":481,"purl_namespace":480,"purl_name":479,"source":9,"versions":482},"Debian","tomcat10","debian","deb",[483,487,490],{"version":484,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":486,"version_end_type":458,"fixed_in":9},"lt10_1_55_1~deb12u1","ecosystem","10.1.55-1~deb12u1",{"version":488,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":489,"version_end_type":458,"fixed_in":9},"lt10_1_55_1~deb13u1","10.1.55-1~deb13u1",{"version":491,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":492,"version_end_type":458,"fixed_in":9},"lt10_1_54_1","10.1.54-1",{"ecosystem":478,"name":494,"vendor":480,"product":494,"cpe_part":9,"purl_type":481,"purl_namespace":480,"purl_name":494,"source":9,"versions":495},"tomcat11",[496,499],{"version":497,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":498,"version_end_type":458,"fixed_in":9},"lt11_0_22_1~deb13u1","11.0.22-1~deb13u1",{"version":500,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":501,"version_end_type":458,"fixed_in":9},"lt11_0_21_1","11.0.21-1",{"ecosystem":478,"name":503,"vendor":480,"product":503,"cpe_part":9,"purl_type":481,"purl_namespace":480,"purl_name":503,"source":9,"versions":504},"tomcat9",[505,508,511,512],{"version":506,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":507,"version_end_type":458,"fixed_in":9},"lt9_0_118_0+deb11u1","9.0.118-0+deb11u1",{"version":509,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":510,"version_end_type":458,"fixed_in":9},"lt9_0_70_2","9.0.70-2",{"version":509,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":510,"version_end_type":458,"fixed_in":9},{"version":509,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":510,"version_end_type":458,"fixed_in":9},{"ecosystem":514,"name":479,"vendor":515,"product":479,"cpe_part":9,"purl_type":481,"purl_namespace":515,"purl_name":479,"source":9,"versions":516},"Ubuntu","ubuntu",[517,519,520],{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":514,"name":494,"vendor":515,"product":494,"cpe_part":9,"purl_type":481,"purl_namespace":515,"purl_name":494,"source":9,"versions":522},[523,524],{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":514,"name":526,"vendor":515,"product":526,"cpe_part":9,"purl_type":481,"purl_namespace":515,"purl_name":526,"source":9,"versions":527},"tomcat8",[528],{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":514,"name":503,"vendor":515,"product":503,"cpe_part":9,"purl_type":481,"purl_namespace":515,"purl_name":503,"source":9,"versions":530},[531,532,533,534],{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":518,"is_range":432,"range_type":485,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":536,"name":537,"vendor":538,"product":451,"cpe_part":9,"purl_type":539,"purl_namespace":538,"purl_name":451,"source":9,"versions":540},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","maven",[541,543,545,547],{"version":542,"is_range":432,"range_type":485,"version_start":442,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},"gte9_0_0_M23_lt9_0_116",{"version":544,"is_range":432,"range_type":485,"version_start":446,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},"gte8_5_30_lt9_0_116",{"version":546,"is_range":432,"range_type":485,"version_start":438,"version_start_type":434,"version_end":462,"version_end_type":458,"fixed_in":9},"gte10_1_0_M1_lt10_1_53",{"version":548,"is_range":432,"range_type":485,"version_start":433,"version_start_type":434,"version_end":466,"version_end_type":458,"fixed_in":9},"gte11_0_0_M1_lt11_0_20",{"ecosystem":536,"name":550,"vendor":538,"product":551,"cpe_part":9,"purl_type":539,"purl_namespace":538,"purl_name":551,"source":9,"versions":552},"org.apache.tomcat:tomcat-catalina","tomcat-catalina",[553,554,555,556],{"version":542,"is_range":432,"range_type":485,"version_start":442,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},{"version":544,"is_range":432,"range_type":485,"version_start":446,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},{"version":546,"is_range":432,"range_type":485,"version_start":438,"version_start_type":434,"version_end":462,"version_end_type":458,"fixed_in":9},{"version":548,"is_range":432,"range_type":485,"version_start":433,"version_start_type":434,"version_end":466,"version_end_type":458,"fixed_in":9},{"ecosystem":536,"name":558,"vendor":559,"product":560,"cpe_part":9,"purl_type":539,"purl_namespace":559,"purl_name":560,"source":9,"versions":561},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[562,563,564,565],{"version":542,"is_range":432,"range_type":485,"version_start":442,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},{"version":544,"is_range":432,"range_type":485,"version_start":446,"version_start_type":434,"version_end":457,"version_end_type":458,"fixed_in":9},{"version":546,"is_range":432,"range_type":485,"version_start":438,"version_start_type":434,"version_end":462,"version_end_type":458,"fixed_in":9},{"version":548,"is_range":432,"range_type":485,"version_start":433,"version_start_type":434,"version_end":466,"version_end_type":458,"fixed_in":9}]