{"action":"Upgrade org.apache.tomcat.embed:tomcat-embed-core to 9.0.116 (9.x), 10.1.54 (10.x) or 11.0.21 (11.x) or later.","affected":[{"fixed":"9.0.116","introduced":"9.0.40"},{"fixed":"10.1.54","introduced":"10.1.0-M1"},{"fixed":"11.0.21","introduced":"11.0.0-M1"}],"component":"org.apache.tomcat.embed:tomcat-embed-core","cve_ids":["CVE-2026-34483"],"ecosystem":"Maven","epss":0.00461,"exploited":false,"fixed_versions":["9.0.116","10.1.54","11.0.21"],"ghsa_id":"GHSA-rv64-5gf8-9qq8","id":"tcs_01M5N9CJN80Z5GVX4EW1K5AMSB","modified_at":"2026-09-11T08:25:42.129097701Z","published_at":"2026-04-09T21:31:30Z","references":["https://osv.dev/vulnerability/GHSA-rv64-5gf8-9qq8","https://nvd.nist.gov/vuln/detail/CVE-2026-34483","https://github.com/apache/tomcat","https://lists.apache.org/thread/j1w7304yonlr8vo1tkb5nfs7od1y228b","http://www.openwall.com/lists/oss-security/2026/04/09/26"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-rv64-5gf8-9qq8#Maven/org.apache.tomcat.embed:tomcat-embed-core","url":"https://osv.dev/vulnerability/GHSA-rv64-5gf8-9qq8"}],"summary":"Apache Tomcat has an Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve"}