StackRadar

CVE-2025-24813

CriticalKEV

Advisory

Published 10 Mar 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
10.0
base score, highest
EPSS
0.999
100th percentile
CISA KEV
Listed
since 1 Apr 2025
Charts affected
242
of 17,781 indexed, latest versions
Container images
198
deployed by those charts
Fix available
3 of 4
affected packages

Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 198 images.

Affected packageAffected versionsFixed inImages
Apache Tomcatbitnami9.0.809.0.991
tomcatbitnami9.0.80-19.0.991
tomcat-embed-coremaven8.5.4, 8.5.11, 8.5.14, 8.5.15+64 more9.0.99, 10.1.35197
tomcat-catalinamaven8.5.38, 8.5.82no fix listed2
OSV records
BIT-tomcat-2025-24813GHSA-83qj-6fr2-vhqg

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
tomcat-embed-core@8.5.34
no fix listed

Open the chart page →

10,732
spring-petclinic-cloudplatform9-communityVerified publisher0.2.03 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

3 of the 6 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
platform9community/customers-service:latest2089811e5cc6
tomcat-embed-core@9.0.36
9.0.99
platform9community/vets-service:latestd1165c94dfb3
tomcat-embed-core@9.0.36
9.0.99
platform9community/visits-service:latest8d11b50368c6
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

41,872
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
tomcat-embed-core@10.1.34
10.1.35
apache/hertzbeat-collector:1.8.0a2bab1be574c
tomcat-embed-core@10.1.34
10.1.35

Open the chart page →

14,000
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

10,469
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
tomcat-embed-core@10.1.30
10.1.35

Open the chart page →

2,784
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

11,839
rocketmqgin1.1.02 of 2See more

rocketmq gin 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/rocketmq:4.9.35ac2a4e0f627
tomcat-embed-core@8.5.46
no fix listed
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
tomcat-embed-core@9.0.29
9.0.99

Open the chart page →

9,154
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
tomcat-embed-core@8.5.47
no fix listed

Open the chart page →

10,311
nzbhydra2halkeye2.30.11 of 2See more

nzbhydra2 halkeye 2.30.1

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
binhex/arch-nzbhydra2:3.1.0-1-01fb8952921ab6
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

6,711
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/skywalking-ui:8.1.067d50e4deff4
tomcat-embed-core@8.5.29
no fix listed

Open the chart page →

18,042
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
tomcat-embed-core@10.1.16
10.1.35
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
tomcat-embed-core@10.1.18
10.1.35
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
tomcat-embed-core@10.1.18
10.1.35
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
tomcat-embed-core@10.1.18
10.1.35

Open the chart page →

107,811
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
thingsboard/tb-node:3.6.0f40a542832c4
tomcat-embed-core@9.0.73
9.0.99

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
tomcat-embed-core@9.0.75
9.0.99

Open the chart page →

28,534
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
tomcat-embed-core@9.0.74
9.0.99

Open the chart page →

8,811
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
tomcat-embed-core@9.0.98
9.0.99

Open the chart page →

7,740
geoserver-cloudcamptocamp20.0.55 of 11See more

geoserver-cloud camptocamp2 0.0.5

5 of the 11 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
tomcat-embed-core@9.0.37
9.0.99

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.65 of 11See more

geoserverCloud camptocamp2 0.0.6

5 of the 11 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
tomcat-embed-core@9.0.37
9.0.99
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
tomcat-embed-core@9.0.37
9.0.99

Open the chart page →

84,444
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
tomcat-embed-core@9.0.30
9.0.99

Open the chart page →

8,752
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
tomcat-embed-core@10.1.19
10.1.35

Open the chart page →

5,291
gradle-examplegradle-exampleVerified publisher1.1.31 of 1See more

gradle-example gradle-example 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
quay.io/srcmaxim/gradle-example-app:1.1.37c3fc28746ef
tomcat-embed-core@9.0.46
9.0.99

Open the chart page →

3,393
supertokensgraphql-hive-subcharts1.0.01 of 1See more

supertokens graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
tomcat-embed-core@8.5.47
no fix listed

Open the chart page →

2,709
seata-serverheidaodageshiwoVerified publisher1.0.01 of 1See more

seata-server heidaodageshiwo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seataio/seata-server:1.5.1ee1ed55f4144
tomcat-embed-core@9.0.55
9.0.99

Open the chart page →

5,624
todo-apipavanelthepu0.1.01 of 2See more

todo-api pavanelthepu 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
pavanelthepu/todo-api:1.0.2f47658e3b24c
tomcat-embed-core@9.0.48
9.0.99

Open the chart page →

2,544
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tomcat-embed-core@9.0.65
9.0.99

Open the chart page →

7,576
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
tomcat-embed-core@10.1.33
10.1.35

Open the chart page →

31,844
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
tomcat-embed-core@9.0.68
9.0.99

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
tomcat-embed-core@9.0.55
9.0.99

Open the chart page →

10,120
seldon-coreseldon0.2.72 of 3See more

seldon-core seldon 0.2.7

2 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
seldonio/apife:0.2.7ba81b17f00eb
tomcat-embed-core@8.5.34
no fix listed
seldonio/cluster-manager:0.2.729e362bb1ba2
tomcat-embed-core@8.5.34
no fix listed

Open the chart page →

13,798
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
tomcat-embed-core@9.0.60
9.0.99

Open the chart page →

4,287
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
tomcat-embed-core@9.0.70
9.0.99

Open the chart page →

13,486
accountaccount-serviceVerified publisher0.4.21 of 1See more

account account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vitalii1992/account-service:latest0e694d94551d
tomcat-embed-core@10.1.8
10.1.35

Open the chart page →

2,168
analyticsaccount-serviceVerified publisher0.4.21 of 1See more

analytics account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vitalii1992/analytics-service:latest8e798836ecea
tomcat-embed-core@10.1.8
10.1.35

Open the chart page →

2,326
gatewayaccount-serviceVerified publisher0.4.21 of 1See more

gateway account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vitalii1992/api-gateway-service:latestaabe6ac39356
tomcat-embed-core@10.1.8
10.1.35

Open the chart page →

2,853
orderaccount-serviceVerified publisher0.4.21 of 1See more

order account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vitalii1992/order-service:latest07c4a8833ce4
tomcat-embed-core@10.1.8
10.1.35

Open the chart page →

2,221
quotes-provideraccount-serviceVerified publisher0.4.21 of 1See more

quotes-provider account-service 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
vitalii1992/quotes-provider-service:latest44d2d6e00ab3
tomcat-embed-core@10.1.8
10.1.35

Open the chart page →

2,205
airports-apiairports-api0.1.01 of 1See more

airports-api airports-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
tomcat-embed-core@10.1.7
10.1.35

Open the chart page →

1,958
airports-consumerairports-consumer0.1.01 of 1See more

airports-consumer airports-consumer 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dina1993/airports-consumer:latest669d146a5e63
tomcat-embed-core@10.1.7
10.1.35

Open the chart page →

1,947
airports-producerairports-producer0.1.01 of 1See more

airports-producer airports-producer 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dina1993/airports-producer:latest3d6b0dac1cb4
tomcat-embed-core@10.1.7
10.1.35

Open the chart page →

1,947
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
tomcat-embed-core@10.1.28
10.1.35

Open the chart page →

1,748
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
tomcat-embed-core@10.1.17
10.1.35

Open the chart page →

28,131
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
apache-iotdbapache-iotdb-single-nodeVerified publisher0.1.01 of 1See more

apache-iotdb apache-iotdb-single-node 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
apache/iotdb:0.11.28647309f95d1
tomcat-embed-core@8.5.32
no fix listed

Open the chart page →

5,277
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
tomcat-embed-core@10.1.16
10.1.35

Open the chart page →

6,187
chart-app-vidapp-vid-chartVerified publisher0.0.71 of 2See more

chart-app-vid app-vid-chart 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
fimperato/sparkvid-api:1.0.5-RELEASE604012b77841
tomcat-embed-core@9.0.38
9.0.99

Open the chart page →

8,866
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
Apache Tomcat@9.0.80
tomcat@9.0.80-1
9.0.99
9.0.99

Open the chart page →

9,722
url-shortenerbeastob1.0.21 of 3See more

url-shortener beastob 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
beastob/url-shortener:1.0.299a49885ab33
tomcat-embed-core@9.0.53
9.0.99

Open the chart page →

3,607
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190
colosseumbook-k8sinfra-v21.0.181 of 5See more

colosseum book-k8sinfra-v2 1.0.18

1 of the 5 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-agg:logbc25b152d88e
tomcat-embed-core@10.1.34
10.1.35

Open the chart page →

26,996
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-24813.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99

Open the chart page →

20,190

Container images carrying it

198 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
tomcat-embed-core@9.0.36
9.0.99
79
apache/shenyu-admin:2.4.2e8b7c4ddd069
tomcat-embed-core@9.0.29
9.0.99
3
pavanelthepu/todo-api:1.0.2f47658e3b24c
tomcat-embed-core@9.0.48
9.0.99
3
supertokens/supertokens-postgresql:3.1418d34c781347
tomcat-embed-core@8.5.47
no fix listed
3
apachepulsar/pulsar-manager:v0.1.0b341ef76a852
tomcat-embed-core@8.5.31
no fix listed
2
dina1993/airports-api:latestac731244aed1
tomcat-embed-core@10.1.7
10.1.35
2
dina1993/airports-consumer:latest669d146a5e63
tomcat-embed-core@10.1.7
10.1.35
2
dina1993/airports-producer:latest3d6b0dac1cb4
tomcat-embed-core@10.1.7
10.1.35
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
tomcat-embed-core@9.0.37
9.0.99
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
tomcat-embed-core@9.0.37
9.0.99
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
tomcat-embed-core@9.0.37
9.0.99
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
tomcat-embed-core@9.0.37
9.0.99
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
tomcat-embed-core@9.0.37
9.0.99
2
inaccel/coral:2.18c53744ed70b
tomcat-embed-core@9.0.83
9.0.99
2
nacos/nacos-server:v2.1.0dcf04549c6d7
tomcat-embed-core@9.0.38
9.0.99
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
tomcat-embed-core@9.0.65
9.0.99
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
tomcat-embed-core@9.0.26
9.0.99
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
tomcat-embed-core@9.0.55
9.0.99
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
tomcat-embed-core@9.0.55
9.0.99
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
tomcat-embed-core@9.0.65
9.0.99
2
2martens/configserver:latestbf1cdb80239d
tomcat-embed-core@10.1.28
10.1.35
1
adityaprasadpathak/myapp:3.07e3b9777362c
tomcat-embed-core@10.1.25
10.1.35
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
tomcat-embed-core@9.0.46
9.0.99
1
andrianrf/backoffice-be:latest6036614803d4
tomcat-embed-core@9.0.75
9.0.99
1
andrianrf/bpjstk-service:latest46abe878d9d8
tomcat-embed-core@9.0.38
9.0.99
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
tomcat-embed-core@9.0.38
9.0.99
1
andrianrf/iso-client:latestba560086ce15
tomcat-embed-core@9.0.38
9.0.99
1
andrianrf/iso-server:latest7da47f525c7d
tomcat-embed-core@9.0.36
9.0.99
1
anguda/ant-media:2.5c435285fc241
tomcat-catalina@8.5.82
tomcat-embed-core@8.5.82
no fix listed
no fix listed
1
apache/drill:1.21.11f96558fd292
tomcat-embed-core@8.5.46
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
tomcat-embed-core@10.1.34
10.1.35
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
tomcat-embed-core@10.1.34
10.1.35
1
apache/iotdb:0.11.28647309f95d1
tomcat-embed-core@8.5.32
no fix listed
1
apache/ranger:2.7.076c176e8a0e4
tomcat-embed-core@9.0.98
9.0.99
1
apache/rocketmq:5.3.0434d8398f996
tomcat-embed-core@8.5.46
no fix listed
1
apache/rocketmq:4.9.35ac2a4e0f627
tomcat-embed-core@8.5.46
no fix listed
1
apache/rocketmq-exporter:0.0.2c8fb51195444
tomcat-embed-core@9.0.74
9.0.99
1
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
tomcat-embed-core@9.0.29
9.0.99
1
apache/shenyu-admin:2.5.1e2be712fc4f4
tomcat-embed-core@9.0.63
9.0.99
1
apache/skywalking-ui:8.1.067d50e4deff4
tomcat-embed-core@8.5.29
no fix listed
1
aroralalit/student-producer:1.0.02a094f597b36
tomcat-embed-core@9.0.75
9.0.99
1
arturisimo/webapp-db-java:v2c95524e90b57
tomcat-embed-core@9.0.56
9.0.99
1
audig/clamapi:2.1.62c3fe34ee430
tomcat-embed-core@9.0.37
9.0.99
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.