[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-29146":6},{"stargazers_count":4,"fetched_at":5},7,"2026-08-22T20:44:10.849Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":252,"aliases":253,"duplicate_of":9,"upstream":258,"downstream":259,"duplicates":310,"related":311,"reserved_at":9,"published_at":325,"modified_at":326,"state":327,"summary":328,"references_raw":337,"kevs":481,"epss":482,"epss_history":485,"metrics":762,"affected":779},"CVE-2026-29146","Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.18, from 10.0.0-M1 through 10.1.52, from 9.0.13 through 9..115, from 8.5.38 through 8.5.100, from 7.0.100 through 7.0.109.\n\nUsers are recommended to upgrade to version 11.0.19, 10.1.53 and 9.0.116, which fixes the issue.",null,[11,36,243],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-209","Generation of Error Message Containing Sensitive Information","The product generates an error message that includes sensitive information about its environment, users, or associated data.","weakness","Draft","Base","High",[20,24,28,32],{"id":21,"name":22,"techniques":23},"CAPEC-215","Fuzzing for application mapping",[],{"id":25,"name":26,"techniques":27},"CAPEC-463","Padding Oracle Crypto Attack",[],{"id":29,"name":30,"techniques":31},"CAPEC-54","Query System for Information",[],{"id":33,"name":34,"techniques":35},"CAPEC-7","Blind SQL Injection",[],{"_key":37,"id":37,"name":38,"description":39,"type":15,"status":16,"abstraction":40,"likelihood_of_exploit":18,"capec":41},"CWE-642","External Control of Critical State Data","The product stores security-critical state information about its users, or the product itself, in a location that is accessible to unauthorized actors.","Class",[42,217],{"id":43,"name":44,"techniques":45},"CAPEC-21","Exploitation of Trusted Identifiers",[46,163,193],{"id":47,"name":48,"tactics":49,"countermeasures":59},"T1134","Access Token Manipulation",[50,53,56],{"id":51,"name":52},"TA0030","Defense Evasion",{"id":54,"name":55},"TA0005","Stealth",{"id":57,"name":58},"TA0111","Privilege Escalation",[60,65,70,74,78,83,87,91,96,101,106,110,114,118,122,126,131,135,139,143,147,151,155,159],{"id":61,"name":62,"tactic":63},"D3-CTS","Credential Transmission Scoping",{"name":64},"Isolate",{"id":66,"name":67,"tactic":68},"D3-CCSA","Credential Compromise Scope Analysis",{"name":69},"Detect",{"id":71,"name":72,"tactic":73},"D3-OPM","Operational Process Monitoring",{"name":69},{"id":75,"name":76,"tactic":77},"D3-PSA","Process Spawn Analysis",{"name":69},{"id":79,"name":80,"tactic":81},"D3-ST","Session Termination",{"name":82},"Evict",{"id":84,"name":85,"tactic":86},"D3-CR","Credential Revocation",{"name":82},{"id":88,"name":89,"tactic":90},"D3-ANCI","Authentication Cache Invalidation",{"name":82},{"id":92,"name":93,"tactic":94},"D3-CI","Configuration Inventory",{"name":95},"Model",{"id":97,"name":98,"tactic":99},"D3-DUC","Decoy User Credential",{"name":100},"Deceive",{"id":102,"name":103,"tactic":104},"D3-CH","Credential Hardening",{"name":105},"Harden",{"id":107,"name":108,"tactic":109},"D3-HBPI","Hardware-based Process Isolation",{"name":64},{"id":111,"name":112,"tactic":113},"D3-MFA","Multi-factor Authentication",{"name":105},{"id":115,"name":116,"tactic":117},"D3-CRO","Credential Rotation",{"name":105},{"id":119,"name":120,"tactic":121},"D3-TB","Token Binding",{"name":105},{"id":123,"name":124,"tactic":125},"D3-TBA","Token-based Authentication",{"name":105},{"id":127,"name":128,"tactic":129},"D3-RC","Restore Configuration",{"name":130},"Restore",{"id":132,"name":133,"tactic":134},"D3-RIC","Reissue Credential",{"name":130},{"id":136,"name":137,"tactic":138},"D3-NTPM","Network Traffic Policy Mapping",{"name":95},{"id":140,"name":141,"tactic":142},"D3-AM","Access Modeling",{"name":95},{"id":144,"name":145,"tactic":146},"D3-SCF","System Call Filtering",{"name":64},{"id":148,"name":149,"tactic":150},"D3-AEM","Application Exception Monitoring",{"name":69},{"id":152,"name":153,"tactic":154},"D3-SCA","System Call Analysis",{"name":69},{"id":156,"name":157,"tactic":158},"D3-EAL","Executable Allowlisting",{"name":64},{"id":160,"name":161,"tactic":162},"D3-EDL","Executable Denylisting",{"name":64},{"id":164,"name":165,"tactics":166,"countermeasures":170},"T1528","Steal Application Access Token",[167],{"id":168,"name":169},"TA0031","Credential Access",[171,173,175,177,179,181,183,185,187,189,191],{"id":115,"name":116,"tactic":172},{"name":105},{"id":102,"name":103,"tactic":174},{"name":105},{"id":66,"name":67,"tactic":176},{"name":69},{"id":119,"name":120,"tactic":178},{"name":105},{"id":97,"name":98,"tactic":180},{"name":100},{"id":123,"name":124,"tactic":182},{"name":105},{"id":111,"name":112,"tactic":184},{"name":105},{"id":84,"name":85,"tactic":186},{"name":82},{"id":132,"name":133,"tactic":188},{"name":130},{"id":61,"name":62,"tactic":190},{"name":64},{"id":88,"name":89,"tactic":192},{"name":82},{"id":194,"name":195,"tactics":196,"countermeasures":198},"T1539","Steal Web Session Cookie",[197],{"id":168,"name":169},[199,201,203,205,207,209,211,213,215],{"id":66,"name":67,"tactic":200},{"name":69},{"id":132,"name":133,"tactic":202},{"name":130},{"id":115,"name":116,"tactic":204},{"name":105},{"id":88,"name":89,"tactic":206},{"name":82},{"id":84,"name":85,"tactic":208},{"name":82},{"id":97,"name":98,"tactic":210},{"name":100},{"id":61,"name":62,"tactic":212},{"name":64},{"id":102,"name":103,"tactic":214},{"name":105},{"id":111,"name":112,"tactic":216},{"name":105},{"id":218,"name":219,"techniques":220},"CAPEC-31","Accessing/Intercepting/Modifying HTTP Cookies",[221],{"id":194,"name":195,"tactics":222,"countermeasures":224},[223],{"id":168,"name":169},[225,227,229,231,233,235,237,239,241],{"id":66,"name":67,"tactic":226},{"name":69},{"id":132,"name":133,"tactic":228},{"name":130},{"id":115,"name":116,"tactic":230},{"name":105},{"id":88,"name":89,"tactic":232},{"name":82},{"id":84,"name":85,"tactic":234},{"name":82},{"id":97,"name":98,"tactic":236},{"name":100},{"id":61,"name":62,"tactic":238},{"name":64},{"id":102,"name":103,"tactic":240},{"name":105},{"id":111,"name":112,"tactic":242},{"name":105},{"_key":244,"id":244,"name":245,"description":246,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":247},"CWE-1240","Use of a Cryptographic Primitive with a Risky Implementation","To fulfill the need for a cryptographic primitive, the product implements a cryptographic algorithm using a non-standard, unproven, or disallowed/non-compliant cryptographic implementation.",[248],{"id":249,"name":250,"techniques":251},"CAPEC-97","Cryptanalysis",[],[],[254,255,256,257],"GHSA-h468-7pvh-8vr8","BIT-tomcat-2026-29146","UBUNTU-CVE-2026-29146","DEBIAN-CVE-2026-29146",[],[260,262,264,266,268,270,272,274,276,278,280,282,283,284,286,288,290,292,294,296,298,300,302,304,306,308],{"_key":261},"OPENSUSE-SU-2026:10547-1",{"_key":263},"OPENSUSE-SU-2026:10548-1",{"_key":265},"OPENSUSE-SU-2026:10549-1",{"_key":267},"MGASA-2026-0095",{"_key":269},"OPENSUSE-SU-2026:20595-1",{"_key":271},"SUSE-SU-2026:1572-1",{"_key":273},"SUSE-SU-2026:1558-1",{"_key":275},"OPENSUSE-SU-2026:20611-1",{"_key":277},"OPENSUSE-SU-2026:20612-1",{"_key":279},"SUSE-SU-2026:1604-1",{"_key":281},"SUSE-SU-2026:1603-1",{"_key":257},{"_key":256},{"_key":285},"RHSA-2026:20405",{"_key":287},"RHSA-2026:36787",{"_key":289},"RHSA-2026:36788",{"_key":291},"RHSA-2026:36789",{"_key":293},"RHSA-2026:36790",{"_key":295},"RHSA-2026:36876",{"_key":297},"RHSA-2026:36877",{"_key":299},"RHSA-2026:36878",{"_key":301},"RHSA-2026:36879",{"_key":303},"RHSA-2026:37136",{"_key":305},"RHSA-2026:37137",{"_key":307},"RHSA-2026:38505",{"_key":309},"RHSA-2026:39188",[],[312,313,314,315,316,317,318,319,320,321,322,323],{"_key":261},{"_key":263},{"_key":265},{"_key":267},{"_key":269},{"_key":271},{"_key":273},{"_key":275},{"_key":277},{"_key":279},{"_key":281},{"_key":324},"CGA-RGJM-CQ2X-Q932","2026-04-09T19:21:57.289Z","2026-08-17T12:05:18.740Z","Modified",{"cisa_kev":329,"cisa_ransomware":329,"cisa_vendor":9,"epss_severity":330,"epss_score":331,"severity":332,"severity_score":333,"severity_version":334,"severity_source":335,"severity_vector":336,"severity_status":327},false,"low",0.06258,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[338,349,354,359,364,368,372,376,380,384,388,392,398,403,408,412,416,420,424,428,432,436,440,444,448,452,456,460,464,468,472,476],{"url":339,"sources":340,"tags":344},"https://lists.apache.org/thread/lzt04z2pb3dc5tk85obn80xygw3z1p0w",[335,341,342,343],"nvd","osv_maven","osv_ubuntu",[345,346,347,348],"Vendor Advisory","WEB","Mailing List","REPORT",{"url":350,"sources":351,"tags":352},"http://www.openwall.com/lists/oss-security/2026/04/09/24",[335,341,342,343],[346,347,353,348],"Third Party Advisory",{"url":355,"sources":356,"tags":357},"https://nvd.nist.gov/vuln/detail/CVE-2026-29146",[342],[358],"Advisory",{"url":360,"sources":361,"tags":362},"https://github.com/apache/tomcat",[342],[363],"PACKAGE",{"url":365,"sources":366,"tags":367},"https://github.com/apache/tomcat/commit/0112ed22abfccc3d54e44d91eb08804d0886acd1",[342],[346],{"url":369,"sources":370,"tags":371},"https://github.com/apache/tomcat/commit/607ebc0fa522bd9e8c05517baa2d179bbd1e659c",[342],[346],{"url":373,"sources":374,"tags":375},"https://github.com/apache/tomcat/commit/6d955cceca841f2eabf2d6c46b59a8c7e1cd6eaa",[342],[346],{"url":377,"sources":378,"tags":379},"https://tomcat.apache.org/security-10.html#Fixed_in_Apache_Tomcat_10.1.53",[342],[346],{"url":381,"sources":382,"tags":383},"https://tomcat.apache.org/security-11.html#Fixed_in_Apache_Tomcat_11.0.20",[342],[346],{"url":385,"sources":386,"tags":387},"https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.116",[342],[346],{"url":389,"sources":390,"tags":391},"https://www.herodevs.com/vulnerability-directory/cve-2026-29146",[342],[346],{"url":393,"sources":394,"tags":395},"https://access.redhat.com/security/cve/CVE-2026-29146",[335,341],[396,397],"VDB Entry","X Refsource REDHAT",{"url":399,"sources":400,"tags":401},"https://bugzilla.redhat.com/show_bug.cgi?id=2457020",[335,341],[402,397],"Issue Tracking",{"url":404,"sources":405,"tags":406},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-29146.json",[335,341],[407],"X Sadp Csaf Vex",{"url":409,"sources":410,"tags":411},"https://access.redhat.com/errata/RHSA-2026:20405",[335,341],[345,397],{"url":413,"sources":414,"tags":415},"https://access.redhat.com/errata/RHSA-2026:20406",[335,341],[345,397],{"url":417,"sources":418,"tags":419},"https://access.redhat.com/errata/RHSA-2026:36787",[335,341],[345,397],{"url":421,"sources":422,"tags":423},"https://access.redhat.com/errata/RHSA-2026:36789",[335,341],[345,397],{"url":425,"sources":426,"tags":427},"https://access.redhat.com/errata/RHSA-2026:36788",[335,341],[345,397],{"url":429,"sources":430,"tags":431},"https://access.redhat.com/errata/RHSA-2026:36790",[335,341],[345,397],{"url":433,"sources":434,"tags":435},"https://access.redhat.com/errata/RHSA-2026:37137",[335,341],[345,397],{"url":437,"sources":438,"tags":439},"https://access.redhat.com/errata/RHSA-2026:37136",[335,341],[345,397],{"url":441,"sources":442,"tags":443},"https://access.redhat.com/errata/RHSA-2026:36878",[335,341],[345,397],{"url":445,"sources":446,"tags":447},"https://access.redhat.com/errata/RHSA-2026:36876",[335,341],[345,397],{"url":449,"sources":450,"tags":451},"https://access.redhat.com/errata/RHSA-2026:36877",[335,341],[345,397],{"url":453,"sources":454,"tags":455},"https://access.redhat.com/errata/RHSA-2026:36879",[335,341],[345,397],{"url":457,"sources":458,"tags":459},"https://access.redhat.com/errata/RHSA-2026:38505",[335,341],[345,397],{"url":461,"sources":462,"tags":463},"https://access.redhat.com/errata/RHSA-2026:39188",[335,341],[345,397],{"url":465,"sources":466,"tags":467},"https://access.redhat.com/errata/RHSA-2026:39189",[335,341],[345,397],{"url":469,"sources":470,"tags":471},"https://ubuntu.com/security/CVE-2026-29146",[343],[348],{"url":473,"sources":474,"tags":475},"https://www.cve.org/CVERecord?id=CVE-2026-29146",[343],[348],{"url":477,"sources":478,"tags":480},"https://security-tracker.debian.org/tracker/CVE-2026-29146",[479],"osv_debian",[358],[],{"date":483,"score":331,"percentile":484},"2026-08-22",0.93016,[486,490,494,497,500,503,507,510,513,516,519,522,525,528,530,533,536,539,542,545,548,551,554,557,560,563,566,569,572,575,578,581,585,588,591,594,598,601,604,607,610,613,617,620,622,625,628,631,634,637,640,643,646,649,652,655,658,661,664,667,669,672,675,678,681,685,688,692,695,698,701,704,707,710,713,716,719,722,725,728,731,734,738,741,744,747,750,753,756,759],{"date":487,"score":488,"percentile":489},"2026-04-10",0.00018,0.04872,{"date":491,"score":492,"percentile":493},"2026-04-11",0.00031,0.08877,{"date":495,"score":492,"percentile":496},"2026-04-12",0.08846,{"date":498,"score":492,"percentile":499},"2026-04-13",0.08832,{"date":501,"score":492,"percentile":502},"2026-04-14",0.08705,{"date":504,"score":505,"percentile":506},"2026-04-15",0.00104,0.28477,{"date":508,"score":505,"percentile":509},"2026-04-16",0.28454,{"date":511,"score":505,"percentile":512},"2026-04-17",0.28443,{"date":514,"score":505,"percentile":515},"2026-04-18",0.2843,{"date":517,"score":505,"percentile":518},"2026-04-19",0.28387,{"date":520,"score":505,"percentile":521},"2026-04-20",0.28371,{"date":523,"score":505,"percentile":524},"2026-04-21",0.28379,{"date":526,"score":505,"percentile":527},"2026-04-22",0.28433,{"date":529,"score":505,"percentile":515},"2026-04-23",{"date":531,"score":505,"percentile":532},"2026-04-24",0.28253,{"date":534,"score":505,"percentile":535},"2026-04-25",0.28167,{"date":537,"score":505,"percentile":538},"2026-04-26",0.28141,{"date":540,"score":505,"percentile":541},"2026-04-27",0.2812,{"date":543,"score":505,"percentile":544},"2026-04-28",0.28056,{"date":546,"score":505,"percentile":547},"2026-04-29",0.28063,{"date":549,"score":505,"percentile":550},"2026-04-30",0.28044,{"date":552,"score":505,"percentile":553},"2026-05-01",0.28041,{"date":555,"score":505,"percentile":556},"2026-05-02",0.28077,{"date":558,"score":505,"percentile":559},"2026-05-03",0.28011,{"date":561,"score":505,"percentile":562},"2026-05-04",0.27943,{"date":564,"score":505,"percentile":565},"2026-05-05",0.27903,{"date":567,"score":505,"percentile":568},"2026-05-06",0.279,{"date":570,"score":505,"percentile":571},"2026-05-07",0.27966,{"date":573,"score":505,"percentile":574},"2026-05-08",0.27954,{"date":576,"score":505,"percentile":577},"2026-05-09",0.2799,{"date":579,"score":505,"percentile":580},"2026-05-10",0.2795,{"date":582,"score":583,"percentile":584},"2026-05-11",0.00117,0.29909,{"date":586,"score":583,"percentile":587},"2026-05-12",0.29931,{"date":589,"score":583,"percentile":590},"2026-05-13",0.2998,{"date":592,"score":583,"percentile":593},"2026-05-14",0.30005,{"date":595,"score":596,"percentile":597},"2026-05-15",0.0994,0.93117,{"date":599,"score":596,"percentile":600},"2026-05-16",0.93111,{"date":602,"score":596,"percentile":603},"2026-05-17",0.93108,{"date":605,"score":596,"percentile":606},"2026-05-18",0.93109,{"date":608,"score":596,"percentile":609},"2026-05-19",0.93114,{"date":611,"score":596,"percentile":612},"2026-05-20",0.93119,{"date":614,"score":615,"percentile":616},"2026-05-21",0.12919,0.94147,{"date":618,"score":615,"percentile":619},"2026-05-22",0.94146,{"date":621,"score":615,"percentile":619},"2026-05-23",{"date":623,"score":615,"percentile":624},"2026-05-24",0.9415,{"date":626,"score":615,"percentile":627},"2026-05-25",0.94152,{"date":629,"score":615,"percentile":630},"2026-05-26",0.94151,{"date":632,"score":615,"percentile":633},"2026-05-27",0.94155,{"date":635,"score":615,"percentile":636},"2026-05-28",0.94165,{"date":638,"score":615,"percentile":639},"2026-05-29",0.94173,{"date":641,"score":615,"percentile":642},"2026-05-30",0.94176,{"date":644,"score":615,"percentile":645},"2026-05-31",0.94179,{"date":647,"score":615,"percentile":648},"2026-06-01",0.94182,{"date":650,"score":615,"percentile":651},"2026-06-02",0.94186,{"date":653,"score":615,"percentile":654},"2026-06-03",0.9419,{"date":656,"score":615,"percentile":657},"2026-06-04",0.94189,{"date":659,"score":615,"percentile":660},"2026-06-05",0.94198,{"date":662,"score":615,"percentile":663},"2026-06-06",0.94197,{"date":665,"score":615,"percentile":666},"2026-06-07",0.94199,{"date":668,"score":615,"percentile":660},"2026-06-08",{"date":670,"score":615,"percentile":671},"2026-06-09",0.94205,{"date":673,"score":615,"percentile":674},"2026-06-10",0.94214,{"date":676,"score":615,"percentile":677},"2026-06-11",0.94218,{"date":679,"score":615,"percentile":680},"2026-06-12",0.94239,{"date":682,"score":683,"percentile":684},"2026-06-13",0.12311,0.94053,{"date":686,"score":683,"percentile":687},"2026-06-14",0.94056,{"date":689,"score":690,"percentile":691},"2026-06-15",0.03645,0.881,{"date":693,"score":690,"percentile":694},"2026-06-16",0.88111,{"date":696,"score":690,"percentile":697},"2026-06-17",0.88129,{"date":699,"score":690,"percentile":700},"2026-06-18",0.8814,{"date":702,"score":690,"percentile":703},"2026-06-19",0.88139,{"date":705,"score":690,"percentile":706},"2026-06-20",0.88136,{"date":708,"score":690,"percentile":709},"2026-06-21",0.88135,{"date":711,"score":690,"percentile":712},"2026-06-22",0.88134,{"date":714,"score":690,"percentile":715},"2026-06-23",0.88131,{"date":717,"score":690,"percentile":718},"2026-06-24",0.88141,{"date":720,"score":690,"percentile":721},"2026-06-25",0.88161,{"date":723,"score":690,"percentile":724},"2026-06-26",0.88171,{"date":726,"score":690,"percentile":727},"2026-06-27",0.88183,{"date":729,"score":690,"percentile":730},"2026-06-28",0.88179,{"date":732,"score":690,"percentile":733},"2026-06-29",0.8818,{"date":735,"score":736,"percentile":737},"2026-06-30",0.03494,0.87683,{"date":739,"score":736,"percentile":740},"2026-07-01",0.87705,{"date":742,"score":736,"percentile":743},"2026-07-02",0.87714,{"date":745,"score":736,"percentile":746},"2026-07-03",0.8772,{"date":748,"score":736,"percentile":749},"2026-07-04",0.87727,{"date":751,"score":736,"percentile":752},"2026-07-05",0.8773,{"date":754,"score":736,"percentile":755},"2026-07-06",0.87733,{"date":757,"score":736,"percentile":758},"2026-07-07",0.87734,{"date":760,"score":736,"percentile":761},"2026-07-08",0.87738,[763,768,770,775,777],{"source":335,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":764,"cvss_v4_0":9},{"baseScore":333,"baseSeverity":765,"vectorString":336,"impactScore":766,"exploitabilityScore":767},"HIGH",6,10,{"source":341,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":769,"cvss_v4_0":9},{"baseScore":333,"baseSeverity":765,"vectorString":336,"impactScore":766,"exploitabilityScore":767},{"source":342,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":771,"cvss_v4_0":772},{"baseScore":333,"baseSeverity":9,"vectorString":336,"impactScore":766,"exploitabilityScore":767},{"baseScore":773,"baseSeverity":9,"vectorString":774,"impactScore":9,"exploitabilityScore":9},8.7,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",{"source":343,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":776,"cvss_v4_0":9},{"baseScore":333,"baseSeverity":9,"vectorString":336,"impactScore":766,"exploitabilityScore":767},{"source":479,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":778,"cvss_v4_0":9},{"baseScore":333,"baseSeverity":9,"vectorString":336,"impactScore":766,"exploitabilityScore":767},[780,808,830,846,855,866,874,878,882,888,908,915,924],{"ecosystem":9,"name":781,"vendor":782,"product":783,"cpe_part":784,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":785},"Apache Tomcat","apache software foundation","apache tomcat","a",[786,792,796,800,804],{"version":787,"is_range":788,"range_type":335,"version_start":789,"version_start_type":790,"version_end":791,"version_end_type":790,"fixed_in":9},">= 11.0.0-M1, \u003C= 11.0.18",true,"11.0.0-M1","including","11.0.18",{"version":793,"is_range":788,"range_type":335,"version_start":794,"version_start_type":790,"version_end":795,"version_end_type":790,"fixed_in":9},">= 10.0.0-M1, \u003C= 10.1.52","10.0.0-M1","10.1.52",{"version":797,"is_range":788,"range_type":335,"version_start":798,"version_start_type":790,"version_end":799,"version_end_type":790,"fixed_in":9},">= 9.0.13, \u003C= 9.0.115","9.0.13","9.0.115",{"version":801,"is_range":788,"range_type":335,"version_start":802,"version_start_type":790,"version_end":803,"version_end_type":790,"fixed_in":9},">= 8.5.38, \u003C= 8.5.100","8.5.38","8.5.100",{"version":805,"is_range":788,"range_type":335,"version_start":806,"version_start_type":790,"version_end":807,"version_end_type":790,"fixed_in":9},">= 7.0.100, \u003C= 7.0.109","7.0.100","7.0.109",{"ecosystem":9,"name":809,"vendor":810,"product":811,"cpe_part":784,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":812},"Tomcat","apache","tomcat",[813,816,818,822,826],{"version":814,"is_range":788,"range_type":815,"version_start":806,"version_start_type":790,"version_end":807,"version_end_type":790,"fixed_in":9},"gte7.0.100_lte7.0.109","cpe",{"version":817,"is_range":788,"range_type":815,"version_start":802,"version_start_type":790,"version_end":803,"version_end_type":790,"fixed_in":9},"gte8.5.38_lte8.5.100",{"version":819,"is_range":788,"range_type":815,"version_start":798,"version_start_type":790,"version_end":820,"version_end_type":821,"fixed_in":9},"gte9.0.13_lt9.0.116","9.0.116","excluding",{"version":823,"is_range":788,"range_type":815,"version_start":824,"version_start_type":790,"version_end":825,"version_end_type":821,"fixed_in":9},"gte10.0.0_lt10.1.53","10.0.0","10.1.53",{"version":827,"is_range":788,"range_type":815,"version_start":828,"version_start_type":790,"version_end":829,"version_end_type":821,"fixed_in":9},"gte11.0.0_lt11.0.20","11.0.0","11.0.20",{"ecosystem":831,"name":832,"vendor":833,"product":832,"cpe_part":9,"purl_type":834,"purl_namespace":833,"purl_name":832,"source":9,"versions":835},"Debian","tomcat10","debian","deb",[836,840,843],{"version":837,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":839,"version_end_type":821,"fixed_in":9},"lt10_1_55_1~deb12u1","ecosystem","10.1.55-1~deb12u1",{"version":841,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":842,"version_end_type":821,"fixed_in":9},"lt10_1_55_1~deb13u1","10.1.55-1~deb13u1",{"version":844,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":845,"version_end_type":821,"fixed_in":9},"lt10_1_54_1","10.1.54-1",{"ecosystem":831,"name":847,"vendor":833,"product":847,"cpe_part":9,"purl_type":834,"purl_namespace":833,"purl_name":847,"source":9,"versions":848},"tomcat11",[849,852],{"version":850,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":851,"version_end_type":821,"fixed_in":9},"lt11_0_22_1~deb13u1","11.0.22-1~deb13u1",{"version":853,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":854,"version_end_type":821,"fixed_in":9},"lt11_0_21_1","11.0.21-1",{"ecosystem":831,"name":856,"vendor":833,"product":856,"cpe_part":9,"purl_type":834,"purl_namespace":833,"purl_name":856,"source":9,"versions":857},"tomcat9",[858,861,864,865],{"version":859,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":860,"version_end_type":821,"fixed_in":9},"lt9_0_118_0+deb11u1","9.0.118-0+deb11u1",{"version":862,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":821,"fixed_in":9},"lt9_0_70_2","9.0.70-2",{"version":862,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":821,"fixed_in":9},{"version":862,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":863,"version_end_type":821,"fixed_in":9},{"ecosystem":867,"name":832,"vendor":868,"product":832,"cpe_part":9,"purl_type":834,"purl_namespace":868,"purl_name":832,"source":9,"versions":869},"Ubuntu","ubuntu",[870,872,873],{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":847,"vendor":868,"product":847,"cpe_part":9,"purl_type":834,"purl_namespace":868,"purl_name":847,"source":9,"versions":875},[876,877],{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":879,"vendor":868,"product":879,"cpe_part":9,"purl_type":834,"purl_namespace":868,"purl_name":879,"source":9,"versions":880},"tomcat8",[881],{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":867,"name":856,"vendor":868,"product":856,"cpe_part":9,"purl_type":834,"purl_namespace":868,"purl_name":856,"source":9,"versions":883},[884,885,886,887],{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":871,"is_range":788,"range_type":838,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":889,"name":890,"vendor":891,"product":811,"cpe_part":9,"purl_type":892,"purl_namespace":891,"purl_name":811,"source":9,"versions":893},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","maven",[894,897,899,902,904,906],{"version":895,"is_range":788,"range_type":838,"version_start":789,"version_start_type":790,"version_end":896,"version_end_type":821,"fixed_in":9},"gte11_0_0_M1_lt11_0_19","11.0.19",{"version":898,"is_range":788,"range_type":838,"version_start":798,"version_start_type":790,"version_end":820,"version_end_type":821,"fixed_in":9},"gte9_0_13_lt9_0_116",{"version":900,"is_range":788,"range_type":838,"version_start":901,"version_start_type":790,"version_end":825,"version_end_type":821,"fixed_in":9},"gte10_1_50_lt10_1_53","10.1.50",{"version":903,"is_range":788,"range_type":838,"version_start":789,"version_start_type":790,"version_end":829,"version_end_type":821,"fixed_in":9},"gte11_0_0_M1_lt11_0_20",{"version":905,"is_range":788,"range_type":838,"version_start":802,"version_start_type":790,"version_end":803,"version_end_type":790,"fixed_in":9},"gte8_5_38_lte8_5_100",{"version":907,"is_range":788,"range_type":838,"version_start":806,"version_start_type":790,"version_end":807,"version_end_type":790,"fixed_in":9},"gte7_0_100_lte7_0_109",{"ecosystem":889,"name":909,"vendor":891,"product":910,"cpe_part":9,"purl_type":892,"purl_namespace":891,"purl_name":910,"source":9,"versions":911},"org.apache.tomcat:tomcat-catalina","tomcat-catalina",[912,913,914],{"version":898,"is_range":788,"range_type":838,"version_start":798,"version_start_type":790,"version_end":820,"version_end_type":821,"fixed_in":9},{"version":900,"is_range":788,"range_type":838,"version_start":901,"version_start_type":790,"version_end":825,"version_end_type":821,"fixed_in":9},{"version":895,"is_range":788,"range_type":838,"version_start":789,"version_start_type":790,"version_end":896,"version_end_type":821,"fixed_in":9},{"ecosystem":889,"name":916,"vendor":891,"product":917,"cpe_part":9,"purl_type":892,"purl_namespace":891,"purl_name":917,"source":9,"versions":918},"org.apache.tomcat:tomcat-tribes","tomcat-tribes",[919,920,921,922,923],{"version":898,"is_range":788,"range_type":838,"version_start":798,"version_start_type":790,"version_end":820,"version_end_type":821,"fixed_in":9},{"version":900,"is_range":788,"range_type":838,"version_start":901,"version_start_type":790,"version_end":825,"version_end_type":821,"fixed_in":9},{"version":903,"is_range":788,"range_type":838,"version_start":789,"version_start_type":790,"version_end":829,"version_end_type":821,"fixed_in":9},{"version":905,"is_range":788,"range_type":838,"version_start":802,"version_start_type":790,"version_end":803,"version_end_type":790,"fixed_in":9},{"version":907,"is_range":788,"range_type":838,"version_start":806,"version_start_type":790,"version_end":807,"version_end_type":790,"fixed_in":9},{"ecosystem":889,"name":925,"vendor":926,"product":927,"cpe_part":9,"purl_type":892,"purl_namespace":926,"purl_name":927,"source":9,"versions":928},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[929,930,931],{"version":898,"is_range":788,"range_type":838,"version_start":798,"version_start_type":790,"version_end":820,"version_end_type":821,"fixed_in":9},{"version":900,"is_range":788,"range_type":838,"version_start":901,"version_start_type":790,"version_end":825,"version_end_type":821,"fixed_in":9},{"version":895,"is_range":788,"range_type":838,"version_start":789,"version_start_type":790,"version_end":896,"version_end_type":821,"fixed_in":9}]