org.apache.tomcat.embed:tomcat-embed-jasper vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.tomcat.embed:tomcat-embed-jasper Maven Apache Tomcat: Incorrect JSP tag recycling leads to XSS CVE-2024-52318 Public exploitFix available 6.1 MediumNovember 18, 2024
• org.apache.tomcat.embed:tomcat-embed-jasper Maven Authentication Bypass Using an Alternate Path or Channel in Apache Tomcat CVE-2016-5018 Fix available EPSS 10.3% 9.1 CriticalOctober 28, 2016