Package · Maven

org.apache.tomcat:tomcat-util-scan

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.1

CVE-2026-55276

Apache Tomcat: Logged effective web.xml is incomplete

Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22,…

Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven

Jun 29, 2026