[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-29129":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":134,"aliases":135,"duplicate_of":9,"upstream":139,"downstream":140,"duplicates":168,"related":169,"reserved_at":9,"published_at":183,"modified_at":184,"state":185,"summary":186,"references_raw":195,"kevs":249,"epss":250,"epss_history":253,"metrics":528,"affected":540},"CVE-2026-29129","Configured cipher preference order not preserved vulnerability in Apache Tomcat.\n\nThis issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115.\n\nUsers are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-327","Use of a Broken or Risky Cryptographic Algorithm","The product uses a broken or risky cryptographic algorithm or protocol.","weakness","Draft","Class","High",[20,24,28,118,122,126,130],{"id":21,"name":22,"techniques":23},"CAPEC-20","Encryption Brute Forcing",[],{"id":25,"name":26,"techniques":27},"CAPEC-459","Creating a Rogue Certification Authority Certificate",[],{"id":29,"name":30,"techniques":31},"CAPEC-473","Signature Spoof",[32,109],{"id":33,"name":34,"tactics":35,"countermeasures":42},"T1036.001","Invalid Code Signature",[36,39],{"id":37,"name":38},"TA0030","Defense Evasion",{"id":40,"name":41},"TA0005","Stealth",[43,48,53,58,63,67,71,75,79,83,88,92,96,100,105],{"id":44,"name":45,"tactic":46},"D3-EDL","Executable Denylisting",{"name":47},"Isolate",{"id":49,"name":50,"tactic":51},"D3-DA","Dynamic Analysis",{"name":52},"Detect",{"id":54,"name":55,"tactic":56},"D3-FEV","File Eviction",{"name":57},"Evict",{"id":59,"name":60,"tactic":61},"D3-DF","Decoy File",{"name":62},"Deceive",{"id":64,"name":65,"tactic":66},"D3-CF","Content Filtering",{"name":47},{"id":68,"name":69,"tactic":70},"D3-EAL","Executable Allowlisting",{"name":47},{"id":72,"name":73,"tactic":74},"D3-FA","File Analysis",{"name":52},{"id":76,"name":77,"tactic":78},"D3-LFP","Local File Permissions",{"name":47},{"id":80,"name":81,"tactic":82},"D3-CM","Content Modification",{"name":47},{"id":84,"name":85,"tactic":86},"D3-RF","Restore File",{"name":87},"Restore",{"id":89,"name":90,"tactic":91},"D3-EFA","Emulated File Analysis",{"name":52},{"id":93,"name":94,"tactic":95},"D3-CQ","Content Quarantine",{"name":47},{"id":97,"name":98,"tactic":99},"D3-RFAM","Remote File Access Mediation",{"name":47},{"id":101,"name":102,"tactic":103},"D3-FE","File Encryption",{"name":104},"Harden",{"id":106,"name":107,"tactic":108},"D3-FIM","File Integrity Monitoring",{"name":52},{"id":110,"name":111,"tactics":112,"countermeasures":117},"T1553.002","Code Signing",[113,114],{"id":37,"name":38},{"id":115,"name":116},"TA0112","Defense Impairment",[],{"id":119,"name":120,"techniques":121},"CAPEC-475","Signature Spoofing by Improper Validation",[],{"id":123,"name":124,"techniques":125},"CAPEC-608","Cryptanalysis of Cellular Encryption",[],{"id":127,"name":128,"techniques":129},"CAPEC-614","Rooting SIM Cards",[],{"id":131,"name":132,"techniques":133},"CAPEC-97","Cryptanalysis",[],[],[136,137,138],"GHSA-69cc-cv78-qc8g","BIT-tomcat-2026-29129","DEBIAN-CVE-2026-29129",[],[141,143,145,147,149,151,153,155,157,159,161,163,164,166],{"_key":142},"OPENSUSE-SU-2026:10547-1",{"_key":144},"OPENSUSE-SU-2026:10548-1",{"_key":146},"OPENSUSE-SU-2026:10549-1",{"_key":148},"MGASA-2026-0095",{"_key":150},"OPENSUSE-SU-2026:20595-1",{"_key":152},"SUSE-SU-2026:1572-1",{"_key":154},"SUSE-SU-2026:1558-1",{"_key":156},"OPENSUSE-SU-2026:20611-1",{"_key":158},"OPENSUSE-SU-2026:20612-1",{"_key":160},"SUSE-SU-2026:1604-1",{"_key":162},"SUSE-SU-2026:1603-1",{"_key":138},{"_key":165},"UBUNTU-CVE-2026-29129",{"_key":167},"RHSA-2026:36790",[],[170,171,172,173,174,175,176,177,178,179,180,181],{"_key":142},{"_key":144},{"_key":146},{"_key":148},{"_key":150},{"_key":152},{"_key":154},{"_key":156},{"_key":158},{"_key":160},{"_key":162},{"_key":182},"CGA-PFH5-HMHH-7HCX","2026-04-09T19:19:40.645Z","2026-04-10T18:06:45.771Z","Analyzed",{"cisa_kev":187,"cisa_ransomware":187,"cisa_vendor":9,"epss_severity":188,"epss_score":189,"severity":190,"severity_score":191,"severity_version":192,"severity_source":193,"severity_vector":194,"severity_status":185},false,"low",0.00259,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[196,205,210,215,220,224,228,232,236,240,244],{"url":197,"sources":198,"tags":201},"https://lists.apache.org/thread/r4h1t6f8xhxsxfm6c2z5cprolsosho3f",[193,199,200],"nvd","osv_maven",[202,203,204],"Vendor Advisory","WEB","Mailing List",{"url":206,"sources":207,"tags":208},"http://www.openwall.com/lists/oss-security/2026/04/09/22",[193,199,200],[203,204,209],"Third Party Advisory",{"url":211,"sources":212,"tags":213},"https://nvd.nist.gov/vuln/detail/CVE-2026-29129",[200],[214],"Advisory",{"url":216,"sources":217,"tags":218},"https://github.com/apache/tomcat",[200],[219],"PACKAGE",{"url":221,"sources":222,"tags":223},"https://github.com/apache/tomcat/commit/5cfa876d73f1ff5f4dc8309c4320f684cbeff74e",[200],[203],{"url":225,"sources":226,"tags":227},"https://github.com/apache/tomcat/commit/6db238562ec36ab1106db4d04843f8b33e7a0c06",[200],[203],{"url":229,"sources":230,"tags":231},"https://github.com/apache/tomcat/commit/8d69b33764dba81dce89e3a768de6093a35620ae",[200],[203],{"url":233,"sources":234,"tags":235},"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53",[200],[203],{"url":237,"sources":238,"tags":239},"https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20",[200],[203],{"url":241,"sources":242,"tags":243},"https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116",[200],[203],{"url":245,"sources":246,"tags":248},"https://security-tracker.debian.org/tracker/CVE-2026-29129",[247],"osv_debian",[214],[],{"date":251,"score":189,"percentile":252},"2026-08-22",0.17782,[254,258,262,265,268,271,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,338,341,344,347,350,354,357,360,363,366,369,372,375,378,381,384,387,390,393,396,399,402,405,408,411,414,417,420,423,426,429,432,434,437,440,443,446,449,452,455,459,462,465,468,471,474,477,480,483,486,489,492,495,498,501,504,507,510,513,516,519,522,525],{"date":255,"score":256,"percentile":257},"2026-04-10",0.00018,0.04872,{"date":259,"score":260,"percentile":261},"2026-04-11",0.00021,0.05789,{"date":263,"score":260,"percentile":264},"2026-04-12",0.05781,{"date":266,"score":260,"percentile":267},"2026-04-13",0.05775,{"date":269,"score":260,"percentile":270},"2026-04-14",0.05716,{"date":272,"score":273,"percentile":274},"2026-04-15",0.0003,0.0834,{"date":276,"score":273,"percentile":277},"2026-04-16",0.08343,{"date":279,"score":273,"percentile":280},"2026-04-17",0.08331,{"date":282,"score":273,"percentile":283},"2026-04-18",0.08327,{"date":285,"score":273,"percentile":286},"2026-04-19",0.0831,{"date":288,"score":273,"percentile":289},"2026-04-20",0.08296,{"date":291,"score":273,"percentile":292},"2026-04-21",0.08483,{"date":294,"score":273,"percentile":295},"2026-04-22",0.08514,{"date":297,"score":273,"percentile":298},"2026-04-23",0.08542,{"date":300,"score":273,"percentile":301},"2026-04-24",0.08477,{"date":303,"score":273,"percentile":304},"2026-04-25",0.08459,{"date":306,"score":273,"percentile":307},"2026-04-26",0.08441,{"date":309,"score":273,"percentile":310},"2026-04-27",0.08429,{"date":312,"score":273,"percentile":313},"2026-04-28",0.08428,{"date":315,"score":273,"percentile":316},"2026-04-29",0.08434,{"date":318,"score":273,"percentile":319},"2026-04-30",0.08443,{"date":321,"score":273,"percentile":322},"2026-05-01",0.08396,{"date":324,"score":273,"percentile":325},"2026-05-02",0.08451,{"date":327,"score":273,"percentile":328},"2026-05-03",0.0843,{"date":330,"score":273,"percentile":331},"2026-05-04",0.08388,{"date":333,"score":273,"percentile":334},"2026-05-05",0.08383,{"date":336,"score":273,"percentile":337},"2026-05-06",0.08398,{"date":339,"score":273,"percentile":340},"2026-05-07",0.08526,{"date":342,"score":273,"percentile":343},"2026-05-08",0.08556,{"date":345,"score":273,"percentile":346},"2026-05-09",0.08602,{"date":348,"score":273,"percentile":349},"2026-05-10",0.08603,{"date":351,"score":352,"percentile":353},"2026-05-11",0.00033,0.09705,{"date":355,"score":352,"percentile":356},"2026-05-12",0.09738,{"date":358,"score":352,"percentile":359},"2026-05-13",0.09753,{"date":361,"score":352,"percentile":362},"2026-05-14",0.09804,{"date":364,"score":352,"percentile":365},"2026-05-15",0.098,{"date":367,"score":352,"percentile":368},"2026-05-16",0.09816,{"date":370,"score":352,"percentile":371},"2026-05-17",0.09798,{"date":373,"score":352,"percentile":374},"2026-05-18",0.09756,{"date":376,"score":352,"percentile":377},"2026-05-19",0.09709,{"date":379,"score":352,"percentile":380},"2026-05-20",0.09704,{"date":382,"score":352,"percentile":383},"2026-05-21",0.09676,{"date":385,"score":352,"percentile":386},"2026-05-22",0.09931,{"date":388,"score":352,"percentile":389},"2026-05-23",0.09932,{"date":391,"score":352,"percentile":392},"2026-05-24",0.09929,{"date":394,"score":352,"percentile":395},"2026-05-25",0.09913,{"date":397,"score":352,"percentile":398},"2026-05-26",0.09901,{"date":400,"score":352,"percentile":401},"2026-05-27",0.09969,{"date":403,"score":352,"percentile":404},"2026-05-28",0.10133,{"date":406,"score":352,"percentile":407},"2026-05-29",0.10169,{"date":409,"score":352,"percentile":410},"2026-05-30",0.10165,{"date":412,"score":352,"percentile":413},"2026-05-31",0.10146,{"date":415,"score":352,"percentile":416},"2026-06-01",0.10123,{"date":418,"score":352,"percentile":419},"2026-06-02",0.10113,{"date":421,"score":352,"percentile":422},"2026-06-03",0.1008,{"date":424,"score":352,"percentile":425},"2026-06-04",0.10091,{"date":427,"score":352,"percentile":428},"2026-06-05",0.10136,{"date":430,"score":352,"percentile":431},"2026-06-06",0.10154,{"date":433,"score":352,"percentile":416},"2026-06-07",{"date":435,"score":352,"percentile":436},"2026-06-08",0.10037,{"date":438,"score":352,"percentile":439},"2026-06-09",0.1007,{"date":441,"score":352,"percentile":442},"2026-06-10",0.10111,{"date":444,"score":352,"percentile":445},"2026-06-11",0.10148,{"date":447,"score":352,"percentile":448},"2026-06-12",0.10195,{"date":450,"score":352,"percentile":451},"2026-06-13",0.102,{"date":453,"score":352,"percentile":454},"2026-06-14",0.10184,{"date":456,"score":457,"percentile":458},"2026-06-15",0.0024,0.14896,{"date":460,"score":457,"percentile":461},"2026-06-16",0.14916,{"date":463,"score":457,"percentile":464},"2026-06-17",0.14914,{"date":466,"score":457,"percentile":467},"2026-06-18",0.1492,{"date":469,"score":457,"percentile":470},"2026-06-19",0.14908,{"date":472,"score":457,"percentile":473},"2026-06-20",0.149,{"date":475,"score":457,"percentile":476},"2026-06-21",0.14887,{"date":478,"score":457,"percentile":479},"2026-06-22",0.14877,{"date":481,"score":189,"percentile":482},"2026-06-23",0.16974,{"date":484,"score":189,"percentile":485},"2026-06-24",0.17002,{"date":487,"score":189,"percentile":488},"2026-06-25",0.17096,{"date":490,"score":189,"percentile":491},"2026-06-26",0.1713,{"date":493,"score":189,"percentile":494},"2026-06-27",0.17164,{"date":496,"score":189,"percentile":497},"2026-06-28",0.17128,{"date":499,"score":189,"percentile":500},"2026-06-29",0.17124,{"date":502,"score":189,"percentile":503},"2026-06-30",0.17111,{"date":505,"score":189,"percentile":506},"2026-07-01",0.17208,{"date":508,"score":189,"percentile":509},"2026-07-02",0.17172,{"date":511,"score":189,"percentile":512},"2026-07-03",0.17179,{"date":514,"score":189,"percentile":515},"2026-07-04",0.17191,{"date":517,"score":189,"percentile":518},"2026-07-05",0.17194,{"date":520,"score":189,"percentile":521},"2026-07-06",0.17202,{"date":523,"score":189,"percentile":524},"2026-07-07",0.17192,{"date":526,"score":189,"percentile":527},"2026-07-08",0.17188,[529,534,536,538],{"source":193,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":530,"cvss_v4_0":9},{"baseScore":191,"baseSeverity":531,"vectorString":194,"impactScore":532,"exploitabilityScore":533},"HIGH",6,10,{"source":199,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":535,"cvss_v4_0":9},{"baseScore":191,"baseSeverity":531,"vectorString":194,"impactScore":532,"exploitabilityScore":533},{"source":200,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":537,"cvss_v4_0":9},{"baseScore":191,"baseSeverity":9,"vectorString":194,"impactScore":532,"exploitabilityScore":533},{"source":247,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":539,"cvss_v4_0":9},{"baseScore":191,"baseSeverity":9,"vectorString":194,"impactScore":532,"exploitabilityScore":533},[541,561,577,593,602,613,625,632,639],{"ecosystem":9,"name":542,"vendor":543,"product":544,"cpe_part":545,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":546},"Apache Tomcat","apache software foundation","apache tomcat","a",[547,553,557],{"version":548,"is_range":549,"range_type":193,"version_start":550,"version_start_type":551,"version_end":552,"version_end_type":551,"fixed_in":9},">= 11.0.16, \u003C= 11.0.18",true,"11.0.16","including","11.0.18",{"version":554,"is_range":549,"range_type":193,"version_start":555,"version_start_type":551,"version_end":556,"version_end_type":551,"fixed_in":9},">= 10.1.51, \u003C= 10.1.52","10.1.51","10.1.52",{"version":558,"is_range":549,"range_type":193,"version_start":559,"version_start_type":551,"version_end":560,"version_end_type":551,"fixed_in":9},">= 9.0.114, \u003C= 9.0.115","9.0.114","9.0.115",{"ecosystem":9,"name":562,"vendor":563,"product":564,"cpe_part":545,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":565},"Tomcat","apache","tomcat",[566,571,574],{"version":567,"is_range":549,"range_type":568,"version_start":559,"version_start_type":551,"version_end":569,"version_end_type":570,"fixed_in":9},"gte9.0.114_lt9.0.116","cpe","9.0.116","excluding",{"version":572,"is_range":549,"range_type":568,"version_start":555,"version_start_type":551,"version_end":573,"version_end_type":570,"fixed_in":9},"gte10.1.51_lt10.1.53","10.1.53",{"version":575,"is_range":549,"range_type":568,"version_start":550,"version_start_type":551,"version_end":576,"version_end_type":570,"fixed_in":9},"gte11.0.16_lt11.0.20","11.0.20",{"ecosystem":578,"name":579,"vendor":580,"product":579,"cpe_part":9,"purl_type":581,"purl_namespace":580,"purl_name":579,"source":9,"versions":582},"Debian","tomcat10","debian","deb",[583,587,590],{"version":584,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":586,"version_end_type":570,"fixed_in":9},"lt10_1_55_1~deb12u1","ecosystem","10.1.55-1~deb12u1",{"version":588,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":589,"version_end_type":570,"fixed_in":9},"lt10_1_55_1~deb13u1","10.1.55-1~deb13u1",{"version":591,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":592,"version_end_type":570,"fixed_in":9},"lt10_1_54_1","10.1.54-1",{"ecosystem":578,"name":594,"vendor":580,"product":594,"cpe_part":9,"purl_type":581,"purl_namespace":580,"purl_name":594,"source":9,"versions":595},"tomcat11",[596,599],{"version":597,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":598,"version_end_type":570,"fixed_in":9},"lt11_0_22_1~deb13u1","11.0.22-1~deb13u1",{"version":600,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":601,"version_end_type":570,"fixed_in":9},"lt11_0_21_1","11.0.21-1",{"ecosystem":578,"name":603,"vendor":580,"product":603,"cpe_part":9,"purl_type":581,"purl_namespace":580,"purl_name":603,"source":9,"versions":604},"tomcat9",[605,608,611,612],{"version":606,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":607,"version_end_type":570,"fixed_in":9},"lt9_0_118_0+deb11u1","9.0.118-0+deb11u1",{"version":609,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":610,"version_end_type":570,"fixed_in":9},"lt9_0_70_2","9.0.70-2",{"version":609,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":610,"version_end_type":570,"fixed_in":9},{"version":609,"is_range":549,"range_type":585,"version_start":9,"version_start_type":9,"version_end":610,"version_end_type":570,"fixed_in":9},{"ecosystem":614,"name":615,"vendor":616,"product":564,"cpe_part":9,"purl_type":617,"purl_namespace":616,"purl_name":564,"source":9,"versions":618},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","maven",[619,621,623],{"version":620,"is_range":549,"range_type":585,"version_start":559,"version_start_type":551,"version_end":569,"version_end_type":570,"fixed_in":9},"gte9_0_114_lt9_0_116",{"version":622,"is_range":549,"range_type":585,"version_start":555,"version_start_type":551,"version_end":573,"version_end_type":570,"fixed_in":9},"gte10_1_51_lt10_1_53",{"version":624,"is_range":549,"range_type":585,"version_start":550,"version_start_type":551,"version_end":576,"version_end_type":570,"fixed_in":9},"gte11_0_16_lt11_0_20",{"ecosystem":614,"name":626,"vendor":616,"product":627,"cpe_part":9,"purl_type":617,"purl_namespace":616,"purl_name":627,"source":9,"versions":628},"org.apache.tomcat:tomcat-catalina","tomcat-catalina",[629,630,631],{"version":620,"is_range":549,"range_type":585,"version_start":559,"version_start_type":551,"version_end":569,"version_end_type":570,"fixed_in":9},{"version":622,"is_range":549,"range_type":585,"version_start":555,"version_start_type":551,"version_end":573,"version_end_type":570,"fixed_in":9},{"version":624,"is_range":549,"range_type":585,"version_start":550,"version_start_type":551,"version_end":576,"version_end_type":570,"fixed_in":9},{"ecosystem":614,"name":633,"vendor":616,"product":634,"cpe_part":9,"purl_type":617,"purl_namespace":616,"purl_name":634,"source":9,"versions":635},"org.apache.tomcat:tomcat-coyote","tomcat-coyote",[636,637,638],{"version":620,"is_range":549,"range_type":585,"version_start":559,"version_start_type":551,"version_end":569,"version_end_type":570,"fixed_in":9},{"version":622,"is_range":549,"range_type":585,"version_start":555,"version_start_type":551,"version_end":573,"version_end_type":570,"fixed_in":9},{"version":624,"is_range":549,"range_type":585,"version_start":550,"version_start_type":551,"version_end":576,"version_end_type":570,"fixed_in":9},{"ecosystem":614,"name":640,"vendor":641,"product":642,"cpe_part":9,"purl_type":617,"purl_namespace":641,"purl_name":642,"source":9,"versions":643},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[644,645,646],{"version":620,"is_range":549,"range_type":585,"version_start":559,"version_start_type":551,"version_end":569,"version_end_type":570,"fixed_in":9},{"version":622,"is_range":549,"range_type":585,"version_start":555,"version_start_type":551,"version_end":573,"version_end_type":570,"fixed_in":9},{"version":624,"is_range":549,"range_type":585,"version_start":550,"version_start_type":551,"version_end":576,"version_end_type":570,"fixed_in":9}]