Core Tomcat implementation
94%
Total Score
healthy
Healthy: over 10 years of releases and 36 releases in the last year show active maintenance.
All health scores are okay.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-388833 tomcat-embed-core is vulnerable to Access Control Bypass in versions 8.5.0 - 9.0.120, 10.1.0 - 10.1.57 and 11.0.0 - 11.0.24. | 8.5.0 - 9.0.12010.1.0 - 10.1.5711.0.0 - 11.0.24 | High |
AIKIDO-2026-116174 tomcat-embed-core is vulnerable to Authentication Bypass in versions 7.0.0 - 9.0.120, 10.1.0 - 10.1.57 and 11.0.0 - 11.0.24. | 7.0.0 - 9.0.12010.1.0 - 10.1.5711.0.0 - 11.0.24 | High |
AIKIDO-2026-262210 tomcat-embed-core is vulnerable to Race Condition (TOCTOU) in versions 9.0.42 - 9.0.120, 10.1.0 - 10.1.57 and 11.0.0 - 11.0.24. | 9.0.42 - 9.0.12010.1.0 - 10.1.5711.0.0 - 11.0.24 | Medium |
AIKIDO-2026-915093 tomcat-embed-core is vulnerable to Denial of Service in versions 8.5.59 - 9.0.120, 10.1.0 - 10.1.57 and 11.0.0 - 11.0.24. | 8.5.59 - 9.0.12010.1.0 - 10.1.5711.0.0 - 11.0.24 | High |
AIKIDO-2026-189764 tomcat-embed-core is vulnerable to Improper Authorization in versions 7.0.97 - 9.0.120, 10.1.0 - 10.1.57 and 11.0.0 - 11.0.24. | 7.0.97 - 9.0.12010.1.0 - 10.1.5711.0.0 - 11.0.24 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
org.apache.tomcat:tomcat-annotations-api Version 11.0.24 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.