[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-29145":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":660,"aliases":661,"duplicate_of":9,"upstream":666,"downstream":667,"duplicates":696,"related":697,"reserved_at":9,"published_at":711,"modified_at":712,"state":713,"summary":714,"references_raw":723,"kevs":787,"epss":788,"epss_history":791,"metrics":1067,"affected":1081},"CVE-2026-29145","CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.1.0-M7 through 10.1.52, from 9.0.83 through 9.0.115; Apache Tomcat Native: from 1.1.23 through 1.1.34, from 1.2.0 through 1.2.39, from 1.3.0 through 1.3.6, from 2.0.0 through 2.0.13.\n\nUsers are recommended to upgrade to version Tomcat Native 1.3.7 or 2.0.14 and Tomcat 11.0.20, 10.1.53 and 9.0.116, which fix the issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","weakness","Draft","Class","High",[20,182,261,265,269,273,292,481,543,627],{"id":21,"name":22,"techniques":23},"CAPEC-114","Authentication Abuse",[24],{"id":25,"name":26,"tactics":27,"countermeasures":34},"T1548","Abuse Elevation Control Mechanism",[28,31],{"id":29,"name":30},"TA0030","Defense Evasion",{"id":32,"name":33},"TA0111","Privilege Escalation",[35,40,45,50,55,59,63,67,72,76,80,84,88,92,96,100,104,109,113,117,121,126,130,134,138,142,146,150,154,158,162,166,170,174,178],{"id":36,"name":37,"tactic":38},"D3-CM","Content Modification",{"name":39},"Isolate",{"id":41,"name":42,"tactic":43},"D3-AEM","Application Exception Monitoring",{"name":44},"Detect",{"id":46,"name":47,"tactic":48},"D3-DF","Decoy File",{"name":49},"Deceive",{"id":51,"name":52,"tactic":53},"D3-CI","Configuration Inventory",{"name":54},"Model",{"id":56,"name":57,"tactic":58},"D3-SCA","System Call Analysis",{"name":44},{"id":60,"name":61,"tactic":62},"D3-SFA","System File Analysis",{"name":44},{"id":64,"name":65,"tactic":66},"D3-FA","File Analysis",{"name":44},{"id":68,"name":69,"tactic":70},"D3-FE","File Encryption",{"name":71},"Harden",{"id":73,"name":74,"tactic":75},"D3-AA","Agent Authentication",{"name":71},{"id":77,"name":78,"tactic":79},"D3-CDP","Change Default Password",{"name":71},{"id":81,"name":82,"tactic":83},"D3-AM","Access Modeling",{"name":54},{"id":85,"name":86,"tactic":87},"D3-DI","Data Inventory",{"name":54},{"id":89,"name":90,"tactic":91},"D3-NTPM","Network Traffic Policy Mapping",{"name":54},{"id":93,"name":94,"tactic":95},"D3-PSA","Process Spawn Analysis",{"name":44},{"id":97,"name":98,"tactic":99},"D3-SCP","System Configuration Permissions",{"name":71},{"id":101,"name":102,"tactic":103},"D3-FIM","File Integrity Monitoring",{"name":44},{"id":105,"name":106,"tactic":107},"D3-RC","Restore Configuration",{"name":108},"Restore",{"id":110,"name":111,"tactic":112},"D3-RF","Restore File",{"name":108},{"id":114,"name":115,"tactic":116},"D3-ULA","Unlock Account",{"name":108},{"id":118,"name":119,"tactic":120},"D3-RUAA","Restore User Account Access",{"name":108},{"id":122,"name":123,"tactic":124},"D3-FEV","File Eviction",{"name":125},"Evict",{"id":127,"name":128,"tactic":129},"D3-RD","Restore Database",{"name":108},{"id":131,"name":132,"tactic":133},"D3-AL","Account Locking",{"name":125},{"id":135,"name":136,"tactic":137},"D3-OPM","Operational Process Monitoring",{"name":44},{"id":139,"name":140,"tactic":141},"D3-DA","Dynamic Analysis",{"name":44},{"id":143,"name":144,"tactic":145},"D3-EFA","Emulated File Analysis",{"name":44},{"id":147,"name":148,"tactic":149},"D3-SCF","System Call Filtering",{"name":39},{"id":151,"name":152,"tactic":153},"D3-CF","Content Filtering",{"name":39},{"id":155,"name":156,"tactic":157},"D3-LFP","Local File Permissions",{"name":39},{"id":159,"name":160,"tactic":161},"D3-RFAM","Remote File Access Mediation",{"name":39},{"id":163,"name":164,"tactic":165},"D3-CQ","Content Quarantine",{"name":39},{"id":167,"name":168,"tactic":169},"D3-UAP","User Account Permissions",{"name":39},{"id":171,"name":172,"tactic":173},"D3-HBPI","Hardware-based Process Isolation",{"name":39},{"id":175,"name":176,"tactic":177},"D3-EAL","Executable Allowlisting",{"name":39},{"id":179,"name":180,"tactic":181},"D3-EDL","Executable Denylisting",{"name":39},{"id":183,"name":184,"techniques":185},"CAPEC-115","Authentication Bypass",[186],{"id":25,"name":26,"tactics":187,"countermeasures":190},[188,189],{"id":29,"name":30},{"id":32,"name":33},[191,193,195,197,199,201,203,205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259],{"id":36,"name":37,"tactic":192},{"name":39},{"id":41,"name":42,"tactic":194},{"name":44},{"id":46,"name":47,"tactic":196},{"name":49},{"id":51,"name":52,"tactic":198},{"name":54},{"id":56,"name":57,"tactic":200},{"name":44},{"id":60,"name":61,"tactic":202},{"name":44},{"id":64,"name":65,"tactic":204},{"name":44},{"id":68,"name":69,"tactic":206},{"name":71},{"id":73,"name":74,"tactic":208},{"name":71},{"id":77,"name":78,"tactic":210},{"name":71},{"id":81,"name":82,"tactic":212},{"name":54},{"id":85,"name":86,"tactic":214},{"name":54},{"id":89,"name":90,"tactic":216},{"name":54},{"id":93,"name":94,"tactic":218},{"name":44},{"id":97,"name":98,"tactic":220},{"name":71},{"id":101,"name":102,"tactic":222},{"name":44},{"id":105,"name":106,"tactic":224},{"name":108},{"id":110,"name":111,"tactic":226},{"name":108},{"id":114,"name":115,"tactic":228},{"name":108},{"id":118,"name":119,"tactic":230},{"name":108},{"id":122,"name":123,"tactic":232},{"name":125},{"id":127,"name":128,"tactic":234},{"name":108},{"id":131,"name":132,"tactic":236},{"name":125},{"id":135,"name":136,"tactic":238},{"name":44},{"id":139,"name":140,"tactic":240},{"name":44},{"id":143,"name":144,"tactic":242},{"name":44},{"id":147,"name":148,"tactic":244},{"name":39},{"id":151,"name":152,"tactic":246},{"name":39},{"id":155,"name":156,"tactic":248},{"name":39},{"id":159,"name":160,"tactic":250},{"name":39},{"id":163,"name":164,"tactic":252},{"name":39},{"id":167,"name":168,"tactic":254},{"name":39},{"id":171,"name":172,"tactic":256},{"name":39},{"id":175,"name":176,"tactic":258},{"name":39},{"id":179,"name":180,"tactic":260},{"name":39},{"id":262,"name":263,"techniques":264},"CAPEC-151","Identity Spoofing",[],{"id":266,"name":267,"techniques":268},"CAPEC-194","Fake the Source of Data",[],{"id":270,"name":271,"techniques":272},"CAPEC-22","Exploiting Trust in Client",[],{"id":274,"name":275,"techniques":276},"CAPEC-57","Utilizing REST's Trust in the System Resource to Obtain Sensitive Data",[277],{"id":278,"name":279,"tactics":280,"countermeasures":287},"T1040","Network Sniffing",[281,284],{"id":282,"name":283},"TA0031","Credential Access",{"id":285,"name":286},"TA0102","Discovery",[288],{"id":289,"name":290,"tactic":291},"D3-DNSTA","DNS Traffic Analysis",{"name":44},{"id":293,"name":294,"techniques":295},"CAPEC-593","Session Hijacking",[296,340,453],{"id":297,"name":298,"tactics":299,"countermeasures":303},"T1185","Browser Session Hijacking",[300],{"id":301,"name":302},"TA0100","Collection",[304,308,312,316,320,324,328,332,336],{"id":305,"name":306,"tactic":307},"D3-NTF","Network Traffic Filtering",{"name":39},{"id":309,"name":310,"tactic":311},"D3-NTSA","Network Traffic Signature Analysis",{"name":44},{"id":313,"name":314,"tactic":315},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":44},{"id":317,"name":318,"tactic":319},"D3-APCA","Application Protocol Command Analysis",{"name":44},{"id":321,"name":322,"tactic":323},"D3-NTCD","Network Traffic Community Deviation",{"name":44},{"id":325,"name":326,"tactic":327},"D3-RTSD","Remote Terminal Session Detection",{"name":44},{"id":329,"name":330,"tactic":331},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":44},{"id":333,"name":334,"tactic":335},"D3-CSPP","Client-server Payload Profiling",{"name":44},{"id":337,"name":338,"tactic":339},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":44},{"id":341,"name":342,"tactics":343,"countermeasures":348},"T1550.001","Application Access Token",[344,345],{"id":29,"name":30},{"id":346,"name":347},"TA0109","Lateral Movement",[349,353,355,359,361,365,367,371,375,379,383,387,391,393,395,399,403,405,409,413,415,419,421,425,429,431,435,439,443,445,449,451],{"id":350,"name":351,"tactic":352},"D3-PS","Process Suspension",{"name":125},{"id":317,"name":318,"tactic":354},{"name":44},{"id":356,"name":357,"tactic":358},"D3-MFA","Multi-factor Authentication",{"name":71},{"id":329,"name":330,"tactic":360},{"name":44},{"id":362,"name":363,"tactic":364},"D3-PT","Process Termination",{"name":125},{"id":93,"name":94,"tactic":366},{"name":44},{"id":368,"name":369,"tactic":370},"D3-CH","Credential Hardening",{"name":71},{"id":372,"name":373,"tactic":374},"D3-PLA","Process Lineage Analysis",{"name":44},{"id":376,"name":377,"tactic":378},"D3-CR","Credential Revocation",{"name":125},{"id":380,"name":381,"tactic":382},"D3-ANCI","Authentication Cache Invalidation",{"name":125},{"id":384,"name":385,"tactic":386},"D3-PSMD","Process Self-Modification Detection",{"name":44},{"id":388,"name":389,"tactic":390},"D3-KBPI","Kernel-based Process Isolation",{"name":39},{"id":147,"name":148,"tactic":392},{"name":39},{"id":171,"name":172,"tactic":394},{"name":39},{"id":396,"name":397,"tactic":398},"D3-ABPI","Application-based Process Isolation",{"name":39},{"id":400,"name":401,"tactic":402},"D3-CTS","Credential Transmission Scoping",{"name":39},{"id":337,"name":338,"tactic":404},{"name":44},{"id":406,"name":407,"tactic":408},"D3-DUC","Decoy User Credential",{"name":49},{"id":410,"name":411,"tactic":412},"D3-WSAM","Web Session Access Mediation",{"name":39},{"id":325,"name":326,"tactic":414},{"name":44},{"id":416,"name":417,"tactic":418},"D3-CCSA","Credential Compromise Scope Analysis",{"name":44},{"id":321,"name":322,"tactic":420},{"name":44},{"id":422,"name":423,"tactic":424},"D3-RIC","Reissue Credential",{"name":108},{"id":426,"name":427,"tactic":428},"D3-TBA","Token-based Authentication",{"name":71},{"id":313,"name":314,"tactic":430},{"name":44},{"id":432,"name":433,"tactic":434},"D3-TB","Token Binding",{"name":71},{"id":436,"name":437,"tactic":438},"D3-HR","Host Reboot",{"name":125},{"id":440,"name":441,"tactic":442},"D3-HS","Host Shutdown",{"name":125},{"id":305,"name":306,"tactic":444},{"name":39},{"id":446,"name":447,"tactic":448},"D3-CRO","Credential Rotation",{"name":71},{"id":309,"name":310,"tactic":450},{"name":44},{"id":333,"name":334,"tactic":452},{"name":44},{"id":454,"name":455,"tactics":456,"countermeasures":458},"T1563","Remote Service Session Hijacking",[457],{"id":346,"name":347},[459,461,463,465,469,471,473,475,477,479],{"id":309,"name":310,"tactic":460},{"name":44},{"id":325,"name":326,"tactic":462},{"name":44},{"id":333,"name":334,"tactic":464},{"name":44},{"id":466,"name":467,"tactic":468},"D3-ST","Session Termination",{"name":125},{"id":317,"name":318,"tactic":470},{"name":44},{"id":329,"name":330,"tactic":472},{"name":44},{"id":305,"name":306,"tactic":474},{"name":39},{"id":321,"name":322,"tactic":476},{"name":44},{"id":337,"name":338,"tactic":478},{"name":44},{"id":313,"name":314,"tactic":480},{"name":44},{"id":482,"name":483,"techniques":484},"CAPEC-633","Token Impersonation",[485],{"id":486,"name":487,"tactics":488,"countermeasures":494},"T1134","Access Token Manipulation",[489,490,493],{"id":29,"name":30},{"id":491,"name":492},"TA0005","Stealth",{"id":32,"name":33},[495,497,499,501,503,505,507,509,511,513,515,517,519,521,523,525,527,529,531,533,535,537,539,541],{"id":400,"name":401,"tactic":496},{"name":39},{"id":416,"name":417,"tactic":498},{"name":44},{"id":135,"name":136,"tactic":500},{"name":44},{"id":93,"name":94,"tactic":502},{"name":44},{"id":466,"name":467,"tactic":504},{"name":125},{"id":376,"name":377,"tactic":506},{"name":125},{"id":380,"name":381,"tactic":508},{"name":125},{"id":51,"name":52,"tactic":510},{"name":54},{"id":406,"name":407,"tactic":512},{"name":49},{"id":368,"name":369,"tactic":514},{"name":71},{"id":171,"name":172,"tactic":516},{"name":39},{"id":356,"name":357,"tactic":518},{"name":71},{"id":446,"name":447,"tactic":520},{"name":71},{"id":432,"name":433,"tactic":522},{"name":71},{"id":426,"name":427,"tactic":524},{"name":71},{"id":105,"name":106,"tactic":526},{"name":108},{"id":422,"name":423,"tactic":528},{"name":108},{"id":89,"name":90,"tactic":530},{"name":54},{"id":81,"name":82,"tactic":532},{"name":54},{"id":147,"name":148,"tactic":534},{"name":39},{"id":41,"name":42,"tactic":536},{"name":44},{"id":56,"name":57,"tactic":538},{"name":44},{"id":175,"name":176,"tactic":540},{"name":39},{"id":179,"name":180,"tactic":542},{"name":39},{"id":544,"name":545,"techniques":546},"CAPEC-650","Upload a Web Shell to a Web Server",[547],{"id":548,"name":549,"tactics":550,"countermeasures":554},"T1505.003","Web Shell",[551],{"id":552,"name":553},"TA0110","Persistence",[555,557,559,561,563,567,571,573,575,577,579,581,583,585,589,591,593,595,597,599,601,603,605,607,609,611,613,615,617,621,625],{"id":68,"name":69,"tactic":556},{"name":71},{"id":396,"name":397,"tactic":558},{"name":39},{"id":46,"name":47,"tactic":560},{"name":49},{"id":384,"name":385,"tactic":562},{"name":44},{"id":564,"name":565,"tactic":566},"D3-PLM","Physical Link Mapping",{"name":54},{"id":568,"name":569,"tactic":570},"D3-LLM","Logical Link Mapping",{"name":54},{"id":139,"name":140,"tactic":572},{"name":44},{"id":101,"name":102,"tactic":574},{"name":44},{"id":179,"name":180,"tactic":576},{"name":39},{"id":388,"name":389,"tactic":578},{"name":39},{"id":143,"name":144,"tactic":580},{"name":44},{"id":362,"name":363,"tactic":582},{"name":125},{"id":163,"name":164,"tactic":584},{"name":39},{"id":586,"name":587,"tactic":588},"D3-EHB","Endpoint Health Beacon",{"name":44},{"id":147,"name":148,"tactic":590},{"name":39},{"id":151,"name":152,"tactic":592},{"name":39},{"id":372,"name":373,"tactic":594},{"name":44},{"id":36,"name":37,"tactic":596},{"name":39},{"id":350,"name":351,"tactic":598},{"name":125},{"id":175,"name":176,"tactic":600},{"name":39},{"id":122,"name":123,"tactic":602},{"name":125},{"id":93,"name":94,"tactic":604},{"name":44},{"id":159,"name":160,"tactic":606},{"name":39},{"id":436,"name":437,"tactic":608},{"name":125},{"id":110,"name":111,"tactic":610},{"name":108},{"id":440,"name":441,"tactic":612},{"name":125},{"id":171,"name":172,"tactic":614},{"name":39},{"id":64,"name":65,"tactic":616},{"name":44},{"id":618,"name":619,"tactic":620},"D3-NNI","Network Node Inventory",{"name":54},{"id":622,"name":623,"tactic":624},"D3-RNA","Restore Network Access",{"name":108},{"id":155,"name":156,"tactic":626},{"name":39},{"id":628,"name":629,"techniques":630},"CAPEC-94","Adversary in the Middle (AiTM)",[631],{"id":632,"name":633,"tactics":634,"countermeasures":637},"T1557","Adversary-in-the-Middle",[635,636],{"id":282,"name":283},{"id":301,"name":302},[638,640,642,644,646,648,650,652,654,656],{"id":305,"name":306,"tactic":639},{"name":39},{"id":313,"name":314,"tactic":641},{"name":44},{"id":329,"name":330,"tactic":643},{"name":44},{"id":333,"name":334,"tactic":645},{"name":44},{"id":337,"name":338,"tactic":647},{"name":44},{"id":309,"name":310,"tactic":649},{"name":44},{"id":317,"name":318,"tactic":651},{"name":44},{"id":321,"name":322,"tactic":653},{"name":44},{"id":325,"name":326,"tactic":655},{"name":44},{"id":657,"name":658,"tactic":659},"D3-CAA","Connection Attempt Analysis",{"name":44},[],[662,663,664,665],"GHSA-95jq-rwvf-vjx4","BIT-tomcat-2026-29145","UBUNTU-CVE-2026-29145","DEBIAN-CVE-2026-29145",[],[668,670,672,674,676,678,680,682,684,686,688,690,691,692,694],{"_key":669},"OPENSUSE-SU-2026:10547-1",{"_key":671},"OPENSUSE-SU-2026:10548-1",{"_key":673},"OPENSUSE-SU-2026:10549-1",{"_key":675},"MGASA-2026-0095",{"_key":677},"OPENSUSE-SU-2026:20595-1",{"_key":679},"SUSE-SU-2026:1572-1",{"_key":681},"SUSE-SU-2026:1558-1",{"_key":683},"OPENSUSE-SU-2026:20611-1",{"_key":685},"OPENSUSE-SU-2026:20612-1",{"_key":687},"SUSE-SU-2026:1604-1",{"_key":689},"SUSE-SU-2026:1603-1",{"_key":665},{"_key":664},{"_key":693},"RHSA-2026:20405",{"_key":695},"RHSA-2026:36790",[],[698,699,700,701,702,703,704,705,706,707,708,709],{"_key":669},{"_key":671},{"_key":673},{"_key":675},{"_key":677},{"_key":679},{"_key":681},{"_key":683},{"_key":685},{"_key":687},{"_key":689},{"_key":710},"CGA-W4C6-8MQ2-4848","2026-04-09T19:20:24.601Z","2026-04-10T18:11:31.014Z","Analyzed",{"cisa_kev":715,"cisa_ransomware":715,"cisa_vendor":9,"epss_severity":716,"epss_score":717,"severity":718,"severity_score":719,"severity_version":720,"severity_source":721,"severity_vector":722,"severity_status":713},false,"low",0.00715,"critical",9.1,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",[724,735,740,745,750,754,758,762,766,770,774,778,782],{"url":725,"sources":726,"tags":730},"https://lists.apache.org/thread/yz5fxmhd2j43wgqykssdo7kltws57jfz",[721,727,728,729],"nvd","osv_maven","osv_ubuntu",[731,732,733,734],"Vendor Advisory","WEB","Mailing List","REPORT",{"url":736,"sources":737,"tags":738},"http://www.openwall.com/lists/oss-security/2026/04/09/23",[721,727,728,729],[732,733,739,734],"Third Party Advisory",{"url":741,"sources":742,"tags":743},"https://nvd.nist.gov/vuln/detail/CVE-2026-29145",[728],[744],"Advisory",{"url":746,"sources":747,"tags":748},"https://github.com/apache/tomcat",[728],[749],"PACKAGE",{"url":751,"sources":752,"tags":753},"https://github.com/apache/tomcat/commit/721591f7bff424c693f26adc18ae9b9abac3655b",[728],[732],{"url":755,"sources":756,"tags":757},"https://github.com/apache/tomcat/commit/d1406df5ae0326f39f54c3f64ac30d8fca55cd5b",[728],[732],{"url":759,"sources":760,"tags":761},"https://github.com/apache/tomcat/commit/fe26667cd2385045ac73f4dea086cc9971209b90",[728],[732],{"url":763,"sources":764,"tags":765},"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53",[728],[732],{"url":767,"sources":768,"tags":769},"https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20",[728],[732],{"url":771,"sources":772,"tags":773},"https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116",[728],[732],{"url":775,"sources":776,"tags":777},"https://ubuntu.com/security/CVE-2026-29145",[729],[734],{"url":779,"sources":780,"tags":781},"https://www.cve.org/CVERecord?id=CVE-2026-29145",[729],[734],{"url":783,"sources":784,"tags":786},"https://security-tracker.debian.org/tracker/CVE-2026-29145",[785],"osv_debian",[744],[],{"date":789,"score":717,"percentile":790},"2026-08-22",0.51015,[792,796,800,803,806,809,813,816,819,822,825,828,831,834,837,841,844,847,850,853,856,859,862,865,867,870,873,876,879,882,885,888,892,895,898,901,904,907,910,913,916,919,922,925,928,931,934,937,940,943,946,949,952,955,958,962,965,968,971,974,977,980,983,986,989,992,994,998,1001,1004,1007,1010,1013,1016,1019,1022,1025,1028,1031,1034,1037,1040,1043,1046,1049,1052,1055,1058,1061,1064],{"date":793,"score":794,"percentile":795},"2026-04-10",0.00036,0.10718,{"date":797,"score":798,"percentile":799},"2026-04-11",0.00063,0.19636,{"date":801,"score":798,"percentile":802},"2026-04-12",0.19588,{"date":804,"score":798,"percentile":805},"2026-04-13",0.19529,{"date":807,"score":798,"percentile":808},"2026-04-14",0.1945,{"date":810,"score":811,"percentile":812},"2026-04-15",0.0012,0.30976,{"date":814,"score":811,"percentile":815},"2026-04-16",0.3096,{"date":817,"score":811,"percentile":818},"2026-04-17",0.30949,{"date":820,"score":811,"percentile":821},"2026-04-18",0.30941,{"date":823,"score":811,"percentile":824},"2026-04-19",0.3091,{"date":826,"score":811,"percentile":827},"2026-04-20",0.309,{"date":829,"score":811,"percentile":830},"2026-04-21",0.30907,{"date":832,"score":811,"percentile":833},"2026-04-22",0.30951,{"date":835,"score":811,"percentile":836},"2026-04-23",0.30961,{"date":838,"score":839,"percentile":840},"2026-04-24",0.00035,0.10165,{"date":842,"score":839,"percentile":843},"2026-04-25",0.10176,{"date":845,"score":839,"percentile":846},"2026-04-26",0.10143,{"date":848,"score":839,"percentile":849},"2026-04-27",0.10123,{"date":851,"score":839,"percentile":852},"2026-04-28",0.10087,{"date":854,"score":839,"percentile":855},"2026-04-29",0.10086,{"date":857,"score":839,"percentile":858},"2026-04-30",0.10079,{"date":860,"score":839,"percentile":861},"2026-05-01",0.10061,{"date":863,"score":839,"percentile":864},"2026-05-02",0.10095,{"date":866,"score":839,"percentile":858},"2026-05-03",{"date":868,"score":839,"percentile":869},"2026-05-04",0.10039,{"date":871,"score":839,"percentile":872},"2026-05-05",0.10025,{"date":874,"score":839,"percentile":875},"2026-05-06",0.10022,{"date":877,"score":839,"percentile":878},"2026-05-07",0.10174,{"date":880,"score":839,"percentile":881},"2026-05-08",0.102,{"date":883,"score":839,"percentile":884},"2026-05-09",0.10244,{"date":886,"score":839,"percentile":887},"2026-05-10",0.1024,{"date":889,"score":890,"percentile":891},"2026-05-11",0.00039,0.11514,{"date":893,"score":890,"percentile":894},"2026-05-12",0.11553,{"date":896,"score":890,"percentile":897},"2026-05-13",0.11576,{"date":899,"score":890,"percentile":900},"2026-05-14",0.11608,{"date":902,"score":890,"percentile":903},"2026-05-15",0.11618,{"date":905,"score":890,"percentile":906},"2026-05-16",0.1166,{"date":908,"score":890,"percentile":909},"2026-05-17",0.1163,{"date":911,"score":890,"percentile":912},"2026-05-18",0.11577,{"date":914,"score":890,"percentile":915},"2026-05-19",0.11552,{"date":917,"score":890,"percentile":918},"2026-05-20",0.11544,{"date":920,"score":890,"percentile":921},"2026-05-21",0.11524,{"date":923,"score":890,"percentile":924},"2026-05-22",0.11717,{"date":926,"score":890,"percentile":927},"2026-05-23",0.11696,{"date":929,"score":890,"percentile":930},"2026-05-24",0.11689,{"date":932,"score":890,"percentile":933},"2026-05-25",0.11662,{"date":935,"score":890,"percentile":936},"2026-05-26",0.11652,{"date":938,"score":890,"percentile":939},"2026-05-27",0.11744,{"date":941,"score":890,"percentile":942},"2026-05-28",0.11874,{"date":944,"score":890,"percentile":945},"2026-05-29",0.11935,{"date":947,"score":890,"percentile":948},"2026-05-30",0.11909,{"date":950,"score":890,"percentile":951},"2026-05-31",0.11883,{"date":953,"score":890,"percentile":954},"2026-06-01",0.11861,{"date":956,"score":890,"percentile":957},"2026-06-02",0.11851,{"date":959,"score":960,"percentile":961},"2026-06-03",0.00028,0.08555,{"date":963,"score":960,"percentile":964},"2026-06-04",0.08567,{"date":966,"score":960,"percentile":967},"2026-06-05",0.08602,{"date":969,"score":960,"percentile":970},"2026-06-06",0.08618,{"date":972,"score":960,"percentile":973},"2026-06-07",0.08597,{"date":975,"score":960,"percentile":976},"2026-06-08",0.08549,{"date":978,"score":960,"percentile":979},"2026-06-09",0.08583,{"date":981,"score":960,"percentile":982},"2026-06-10",0.08589,{"date":984,"score":960,"percentile":985},"2026-06-11",0.08623,{"date":987,"score":960,"percentile":988},"2026-06-12",0.08664,{"date":990,"score":960,"percentile":991},"2026-06-13",0.08669,{"date":993,"score":960,"percentile":988},"2026-06-14",{"date":995,"score":996,"percentile":997},"2026-06-15",0.00664,0.46719,{"date":999,"score":996,"percentile":1000},"2026-06-16",0.46765,{"date":1002,"score":996,"percentile":1003},"2026-06-17",0.46838,{"date":1005,"score":996,"percentile":1006},"2026-06-18",0.46881,{"date":1008,"score":996,"percentile":1009},"2026-06-19",0.46874,{"date":1011,"score":996,"percentile":1012},"2026-06-20",0.4687,{"date":1014,"score":996,"percentile":1015},"2026-06-21",0.46851,{"date":1017,"score":996,"percentile":1018},"2026-06-22",0.46846,{"date":1020,"score":717,"percentile":1021},"2026-06-23",0.48877,{"date":1023,"score":717,"percentile":1024},"2026-06-24",0.48912,{"date":1026,"score":717,"percentile":1027},"2026-06-25",0.48991,{"date":1029,"score":717,"percentile":1030},"2026-06-26",0.49029,{"date":1032,"score":717,"percentile":1033},"2026-06-27",0.49072,{"date":1035,"score":717,"percentile":1036},"2026-06-28",0.49068,{"date":1038,"score":717,"percentile":1039},"2026-06-29",0.49065,{"date":1041,"score":717,"percentile":1042},"2026-06-30",0.49056,{"date":1044,"score":717,"percentile":1045},"2026-07-01",0.49144,{"date":1047,"score":717,"percentile":1048},"2026-07-02",0.49183,{"date":1050,"score":717,"percentile":1051},"2026-07-03",0.49199,{"date":1053,"score":717,"percentile":1054},"2026-07-04",0.49223,{"date":1056,"score":717,"percentile":1057},"2026-07-05",0.49232,{"date":1059,"score":717,"percentile":1060},"2026-07-06",0.49241,{"date":1062,"score":717,"percentile":1063},"2026-07-07",0.49251,{"date":1065,"score":717,"percentile":1066},"2026-07-08",0.49265,[1068,1073,1075,1077,1079],{"source":721,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1069,"cvss_v4_0":9},{"baseScore":719,"baseSeverity":1070,"vectorString":722,"impactScore":1071,"exploitabilityScore":1072},"CRITICAL",8.7,10,{"source":727,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1074,"cvss_v4_0":9},{"baseScore":719,"baseSeverity":1070,"vectorString":722,"impactScore":1071,"exploitabilityScore":1072},{"source":728,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1076,"cvss_v4_0":9},{"baseScore":719,"baseSeverity":9,"vectorString":722,"impactScore":1071,"exploitabilityScore":1072},{"source":729,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1078,"cvss_v4_0":9},{"baseScore":719,"baseSeverity":9,"vectorString":722,"impactScore":1071,"exploitabilityScore":1072},{"source":785,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1080,"cvss_v4_0":9},{"baseScore":719,"baseSeverity":9,"vectorString":722,"impactScore":1071,"exploitabilityScore":1072},[1082,1102,1122,1170,1180,1196,1205,1216,1224,1228,1232,1244,1251,1258],{"ecosystem":9,"name":1083,"vendor":1084,"product":1085,"cpe_part":1086,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1087},"Apache Tomcat","apache software foundation","apache tomcat","a",[1088,1094,1098],{"version":1089,"is_range":1090,"range_type":721,"version_start":1091,"version_start_type":1092,"version_end":1093,"version_end_type":1092,"fixed_in":9},">= 11.0.0-M1, \u003C= 11.0.18",true,"11.0.0-M1","including","11.0.18",{"version":1095,"is_range":1090,"range_type":721,"version_start":1096,"version_start_type":1092,"version_end":1097,"version_end_type":1092,"fixed_in":9},">= 10.1.0-M7, \u003C= 10.1.52","10.1.0-M7","10.1.52",{"version":1099,"is_range":1090,"range_type":721,"version_start":1100,"version_start_type":1092,"version_end":1101,"version_end_type":1092,"fixed_in":9},">= 9.0.83, \u003C= 9.0.115","9.0.83","9.0.115",{"ecosystem":9,"name":1103,"vendor":1084,"product":1104,"cpe_part":1086,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1105},"Apache Tomcat Native","apache tomcat native",[1106,1110,1114,1118],{"version":1107,"is_range":1090,"range_type":721,"version_start":1108,"version_start_type":1092,"version_end":1109,"version_end_type":1092,"fixed_in":9},">= 1.1.23, \u003C= 1.1.34","1.1.23","1.1.34",{"version":1111,"is_range":1090,"range_type":721,"version_start":1112,"version_start_type":1092,"version_end":1113,"version_end_type":1092,"fixed_in":9},">= 1.2.0, \u003C= 1.2.39","1.2.0","1.2.39",{"version":1115,"is_range":1090,"range_type":721,"version_start":1116,"version_start_type":1092,"version_end":1117,"version_end_type":1092,"fixed_in":9},">= 1.3.0, \u003C= 1.3.6","1.3.0","1.3.6",{"version":1119,"is_range":1090,"range_type":721,"version_start":1120,"version_start_type":1092,"version_end":1121,"version_end_type":1092,"fixed_in":9},">= 2.0.0, \u003C= 2.0.13","2.0.0","2.0.13",{"ecosystem":9,"name":1123,"vendor":1124,"product":1125,"cpe_part":1086,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1126},"Tomcat","apache","tomcat",[1127,1132,1136,1140,1142,1144,1146,1148,1150,1152,1154,1156,1158,1160,1162,1164,1166,1168],{"version":1128,"is_range":1090,"range_type":1129,"version_start":1100,"version_start_type":1092,"version_end":1130,"version_end_type":1131,"fixed_in":9},"gte9.0.83_lt9.0.116","cpe","9.0.116","excluding",{"version":1133,"is_range":1090,"range_type":1129,"version_start":1134,"version_start_type":1092,"version_end":1135,"version_end_type":1131,"fixed_in":9},"gte10.1.1_lt10.1.53","10.1.1","10.1.53",{"version":1137,"is_range":1090,"range_type":1129,"version_start":1138,"version_start_type":1092,"version_end":1139,"version_end_type":1131,"fixed_in":9},"gte11.0.0_lt11.0.20","11.0.0","11.0.20",{"version":1141,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0",{"version":1143,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone10",{"version":1145,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone11",{"version":1147,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone12",{"version":1149,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone13",{"version":1151,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone14",{"version":1153,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone15",{"version":1155,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone16",{"version":1157,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone17",{"version":1159,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone18",{"version":1161,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone19",{"version":1163,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone20",{"version":1165,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone7",{"version":1167,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone8",{"version":1169,"is_range":715,"range_type":1129,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"10.1.0:milestone9",{"ecosystem":9,"name":1171,"vendor":1124,"product":1172,"cpe_part":1086,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1173},"tomcat native","tomcat_native",[1174,1177],{"version":1175,"is_range":1090,"range_type":1129,"version_start":1108,"version_start_type":1092,"version_end":1176,"version_end_type":1131,"fixed_in":9},"gte1.1.23_lt1.3.7","1.3.7",{"version":1178,"is_range":1090,"range_type":1129,"version_start":1120,"version_start_type":1092,"version_end":1179,"version_end_type":1131,"fixed_in":9},"gte2.0.0_lt2.0.14","2.0.14",{"ecosystem":1181,"name":1182,"vendor":1183,"product":1182,"cpe_part":9,"purl_type":1184,"purl_namespace":1183,"purl_name":1182,"source":9,"versions":1185},"Debian","tomcat10","debian","deb",[1186,1190,1193],{"version":1187,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1189,"version_end_type":1131,"fixed_in":9},"lt10_1_55_1~deb12u1","ecosystem","10.1.55-1~deb12u1",{"version":1191,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1192,"version_end_type":1131,"fixed_in":9},"lt10_1_55_1~deb13u1","10.1.55-1~deb13u1",{"version":1194,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1195,"version_end_type":1131,"fixed_in":9},"lt10_1_54_1","10.1.54-1",{"ecosystem":1181,"name":1197,"vendor":1183,"product":1197,"cpe_part":9,"purl_type":1184,"purl_namespace":1183,"purl_name":1197,"source":9,"versions":1198},"tomcat11",[1199,1202],{"version":1200,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1201,"version_end_type":1131,"fixed_in":9},"lt11_0_22_1~deb13u1","11.0.22-1~deb13u1",{"version":1203,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1204,"version_end_type":1131,"fixed_in":9},"lt11_0_21_1","11.0.21-1",{"ecosystem":1181,"name":1206,"vendor":1183,"product":1206,"cpe_part":9,"purl_type":1184,"purl_namespace":1183,"purl_name":1206,"source":9,"versions":1207},"tomcat9",[1208,1211,1214,1215],{"version":1209,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1210,"version_end_type":1131,"fixed_in":9},"lt9_0_118_0+deb11u1","9.0.118-0+deb11u1",{"version":1212,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1213,"version_end_type":1131,"fixed_in":9},"lt9_0_70_2","9.0.70-2",{"version":1212,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1213,"version_end_type":1131,"fixed_in":9},{"version":1212,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":1213,"version_end_type":1131,"fixed_in":9},{"ecosystem":1217,"name":1182,"vendor":1218,"product":1182,"cpe_part":9,"purl_type":1184,"purl_namespace":1218,"purl_name":1182,"source":9,"versions":1219},"Ubuntu","ubuntu",[1220,1222,1223],{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1217,"name":1197,"vendor":1218,"product":1197,"cpe_part":9,"purl_type":1184,"purl_namespace":1218,"purl_name":1197,"source":9,"versions":1225},[1226,1227],{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1217,"name":1206,"vendor":1218,"product":1206,"cpe_part":9,"purl_type":1184,"purl_namespace":1218,"purl_name":1206,"source":9,"versions":1229},[1230,1231],{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":1221,"is_range":1090,"range_type":1188,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":1233,"name":1234,"vendor":1235,"product":1125,"cpe_part":9,"purl_type":1236,"purl_namespace":1235,"purl_name":1125,"source":9,"versions":1237},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","maven",[1238,1240,1242],{"version":1239,"is_range":1090,"range_type":1188,"version_start":1100,"version_start_type":1092,"version_end":1130,"version_end_type":1131,"fixed_in":9},"gte9_0_83_lt9_0_116",{"version":1241,"is_range":1090,"range_type":1188,"version_start":1096,"version_start_type":1092,"version_end":1135,"version_end_type":1131,"fixed_in":9},"gte10_1_0_M7_lt10_1_53",{"version":1243,"is_range":1090,"range_type":1188,"version_start":1091,"version_start_type":1092,"version_end":1139,"version_end_type":1131,"fixed_in":9},"gte11_0_0_M1_lt11_0_20",{"ecosystem":1233,"name":1245,"vendor":1235,"product":1246,"cpe_part":9,"purl_type":1236,"purl_namespace":1235,"purl_name":1246,"source":9,"versions":1247},"org.apache.tomcat:tomcat-catalina","tomcat-catalina",[1248,1249,1250],{"version":1239,"is_range":1090,"range_type":1188,"version_start":1100,"version_start_type":1092,"version_end":1130,"version_end_type":1131,"fixed_in":9},{"version":1241,"is_range":1090,"range_type":1188,"version_start":1096,"version_start_type":1092,"version_end":1135,"version_end_type":1131,"fixed_in":9},{"version":1243,"is_range":1090,"range_type":1188,"version_start":1091,"version_start_type":1092,"version_end":1139,"version_end_type":1131,"fixed_in":9},{"ecosystem":1233,"name":1252,"vendor":1235,"product":1253,"cpe_part":9,"purl_type":1236,"purl_namespace":1235,"purl_name":1253,"source":9,"versions":1254},"org.apache.tomcat:tomcat-coyote-ffm","tomcat-coyote-ffm",[1255,1256,1257],{"version":1239,"is_range":1090,"range_type":1188,"version_start":1100,"version_start_type":1092,"version_end":1130,"version_end_type":1131,"fixed_in":9},{"version":1241,"is_range":1090,"range_type":1188,"version_start":1096,"version_start_type":1092,"version_end":1135,"version_end_type":1131,"fixed_in":9},{"version":1243,"is_range":1090,"range_type":1188,"version_start":1091,"version_start_type":1092,"version_end":1139,"version_end_type":1131,"fixed_in":9},{"ecosystem":1233,"name":1259,"vendor":1260,"product":1261,"cpe_part":9,"purl_type":1236,"purl_namespace":1260,"purl_name":1261,"source":9,"versions":1262},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[1263,1264,1265],{"version":1239,"is_range":1090,"range_type":1188,"version_start":1100,"version_start_type":1092,"version_end":1130,"version_end_type":1131,"fixed_in":9},{"version":1241,"is_range":1090,"range_type":1188,"version_start":1096,"version_start_type":1092,"version_end":1135,"version_end_type":1131,"fixed_in":9},{"version":1243,"is_range":1090,"range_type":1188,"version_start":1091,"version_start_type":1092,"version_end":1139,"version_end_type":1131,"fixed_in":9}]