CVE-2025-48976
Fixed in a distro release EPSS 33%CVSS 7.5
Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade to versions 1.6 or 2.0.0-M4, which fix the issue.
Products: Apache Software Foundation Apache Commons FileUpload
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | commons-fileupload:commons-fileupload | 1.6.0 |
| Maven | org.apache.commons:commons-fileupload2-core | 2.0.0-M4 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | tomcat9 | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-admin-webapps | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-docs-webapp | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-el-3.0-api | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-jsp-2.3-api | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-lib | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-servlet-4.0-api | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 10 | tomcat9-webapps | 1:9.0.87-5.el10_0.3 |
| AlmaLinux 8 | tomcat | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-admin-webapps | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-docs-webapp | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-el-3.0-api | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-jsp-2.3-api | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-lib | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-servlet-4.0-api | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 8 | tomcat-webapps | 1:9.0.87-1.el8_10.6 |
| AlmaLinux 9 | tomcat | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-admin-webapps | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-docs-webapp | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-el-3.0-api | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-jsp-2.3-api | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-lib | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-servlet-4.0-api | 1:9.0.87-3.el9_6.3 |
| AlmaLinux 9 | tomcat-webapps | 1:9.0.87-3.el9_6.3 |
| Arch Linux | tomcat10 | no fix |
| Arch Linux | tomcat9 | no fix |
| Chainguard | geoserver-2.26 | 2.26.3-r1 |
| Chainguard | geoserver-2.26-community | 2.26.3-r1 |
| Chainguard | geoserver-2.26-docker | 2.26.3-r1 |
| Chainguard | geoserver-2.27 | 2.27.1-r1 |
| Chainguard | geoserver-2.27-community | 2.27.1-r1 |
| Chainguard | geoserver-2.27-docker | 2.27.1-r1 |
| Chainguard | jenkins-2 | 2.515-r0 |
| Chainguard | jenkins-2-openjdk-17 | 2.515-r0 |
| Chainguard | jenkins-2-openjdk-21 | 2.515-r0 |
| Chainguard | jenkins-2.504-openjdk-17 | no fix |
| Chainguard | jenkins-2.504-openjdk-21 | no fix |
| Chainguard | jenkins-compat | 2.515-r0 |
| Chainguard | jenkins-docker-agent | 2.515-r0 |
| Chainguard | jenkins-docker-agent-openjdk-17 | 2.515-r0 |
| Chainguard | jenkins-docker-agent-openjdk-21 | 2.515-r0 |
| Chainguard | jenkins-remoting | 2.515-r0 |
| Chainguard | jenkins-utils | 2.515-r0 |
| Debian 11 | libcommons-fileupload-java | 1.4-1+deb11u1 |
| Debian 11 | tomcat9 | 9.0.107-0+deb11u1 |
| Debian 12 | libcommons-fileupload-java | no fix |
| Debian 12 | tomcat10 | 10.1.52-1~deb12u1 |
| Debian 12 | tomcat9 | 9.0.70-2 |
| Debian 13 | libcommons-fileupload-java | no fix |
| Debian 13 | tomcat10 | 10.1.52-1~deb13u1 |
| Debian 13 | tomcat11 | 11.0.15-1~deb13u1 |
| Debian 13 | tomcat9 | 9.0.70-2 |
| Debian 14 | libcommons-fileupload-java | no fix |
| Debian 14 | tomcat10 | 10.1.46-1 |
| Debian 14 | tomcat11 | 11.0.11-1 |
| Debian 14 | tomcat9 | 9.0.70-2 |
| Red Hat Enterprise Linux 10.0 | tomcat | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-admin-webapps | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-docs-webapp | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-el-5.0-api | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-jsp-3.1-api | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-lib | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-servlet-6.0-api | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat-webapps | 1:10.1.36-1.el10_0.2 |
| Red Hat Enterprise Linux 10.0 | tomcat9 | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-admin-webapps | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-docs-webapp | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-el-3.0-api | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-jsp-2.3-api | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-lib | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-servlet-4.0-api | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 10.0 | tomcat9-webapps | 1:9.0.87-5.el10_0.3 |
| Red Hat Enterprise Linux 8 | tomcat | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-admin-webapps | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-docs-webapp | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-el-3.0-api | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-jsp-2.3-api | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-lib | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-servlet-4.0-api | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 8 | tomcat-webapps | 1:9.0.87-1.el8_10.6 |
| Red Hat Enterprise Linux 9 | tomcat | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-admin-webapps | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-docs-webapp | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-el-3.0-api | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-jsp-2.3-api | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-lib | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-servlet-4.0-api | 1:9.0.87-3.el9_6.3 |
| Red Hat Enterprise Linux 9 | tomcat-webapps | 1:9.0.87-3.el9_6.3 |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-admin-webapps | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-admin-webapps | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-admin-webapps | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-docs-webapp | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-docs-webapp | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-docs-webapp | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-el-3.0-api | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-el-3.0-api | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-el-3.0-api | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-java-jdk11 | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-java-jdk8 | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-javadoc | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-javadoc | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-javadoc | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-jsp-2.3-api | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-jsp-2.3-api | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-jsp-2.3-api | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-lib | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-lib | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-lib | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-selinux | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-selinux | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-selinux | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-servlet-4.0-api | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-servlet-4.0-api | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-servlet-4.0-api | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-webapps | 0:9.0.87-12.redhat_00011.1.el8jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-webapps | 0:9.0.87-12.redhat_00011.1.el7jws |
| Red Hat jboss enterprise web server 5.8 | jws5-tomcat-webapps | 0:9.0.87-12.redhat_00011.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-admin-webapps | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-admin-webapps | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-admin-webapps | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-docs-webapp | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-docs-webapp | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-docs-webapp | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-el-5.0-api | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-el-5.0-api | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-el-5.0-api | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-javadoc | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-javadoc | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-javadoc | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-jsp-3.1-api | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-jsp-3.1-api | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-jsp-3.1-api | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-lib | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-lib | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-lib | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-selinux | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-selinux | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-selinux | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-servlet-6.0-api | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-servlet-6.0-api | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-servlet-6.0-api | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-webapps | 0:10.1.36-7.redhat_00008.1.el9jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-webapps | 0:10.1.36-7.redhat_00008.1.el8jws |
| Red Hat jboss enterprise web server 6.1 | jws6-tomcat-webapps | 0:10.1.36-7.redhat_00008.1.el10jws |
| Red Hat rhel e4s 8.8 | tomcat | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-admin-webapps | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-docs-webapp | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-el-3.0-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-jsp-2.3-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-lib | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-servlet-4.0-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 8.8 | tomcat-webapps | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel e4s 9.2 | tomcat | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-admin-webapps | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-docs-webapp | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-el-3.0-api | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-jsp-2.3-api | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-lib | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-servlet-4.0-api | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel e4s 9.2 | tomcat-webapps | 1:9.0.87-1.el9_2.6 |
| Red Hat rhel eus 9.4 | tomcat | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-admin-webapps | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-docs-webapp | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-el-3.0-api | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-jsp-2.3-api | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-lib | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-servlet-4.0-api | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel eus 9.4 | tomcat-webapps | 1:9.0.87-1.el9_4.6 |
| Red Hat rhel tus 8.8 | tomcat | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-admin-webapps | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-docs-webapp | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-el-3.0-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-jsp-2.3-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-lib | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-servlet-4.0-api | 1:9.0.87-1.el8_8.7 |
| Red Hat rhel tus 8.8 | tomcat-webapps | 1:9.0.87-1.el8_8.7 |
| Rocky Linux 10 | tomcat | 1:10.1.36-1.el10_0.2 |
| Rocky Linux 10 | tomcat9 | 1:9.0.87-5.el10_0.3 |
| Rocky Linux 8 | tomcat | 1:9.0.87-1.el8_10.6 |
| Rocky Linux 9 | tomcat | 1:9.0.87-3.el9_6.3 |
| SUSE Enterprise Storage 7.1 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP6 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Module for Web and Scripting 15 SP7 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server 12 SP5-LTSS | jakarta-commons-fileupload | 1.6.0-126.3.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | jakarta-commons-fileupload | 1.6.0-126.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| SUSE Manager Server 4.3 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| Ubuntu 16.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 18.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 20.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 22.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 24.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 24.04 LTS | tomcat10 | no fix |
| Ubuntu 25.10 | libcommons-fileupload-java | no fix |
| Ubuntu 25.10 | tomcat10 | no fix |
| Ubuntu 25.10 | tomcat11 | no fix |
| Ubuntu 26.04 LTS | libcommons-fileupload-java | no fix |
| Ubuntu 26.04 LTS | tomcat10 | no fix |
| Ubuntu 26.04 LTS | tomcat11 | no fix |
| Ubuntu 26.10 | libcommons-fileupload-java | no fix |
| Ubuntu 26.10 | tomcat10 | no fix |
| Ubuntu Pro 14.04 LTS | tomcat6 | no fix |
| Ubuntu Pro 18.04 LTS | tomcat9 | no fix |
| Ubuntu Pro 20.04 LTS | tomcat9 | no fix |
| Ubuntu Pro 22.04 LTS | tomcat9 | no fix |
| Wolfi | jenkins-2 | 2.515-r0 |
| Wolfi | jenkins-2-openjdk-17 | 2.515-r0 |
| Wolfi | jenkins-2-openjdk-21 | 2.515-r0 |
| Wolfi | jenkins-compat | 2.515-r0 |
| Wolfi | jenkins-docker-agent | 2.515-r0 |
| Wolfi | jenkins-docker-agent-openjdk-17 | 2.515-r0 |
| Wolfi | jenkins-docker-agent-openjdk-21 | 2.515-r0 |
| Wolfi | jenkins-remoting | 2.515-r0 |
| Wolfi | jenkins-utils | 2.515-r0 |
| openSUSE Leap 15.6 | apache-commons-fileupload | 1.6.0-150200.3.12.1 |
| openSUSE Tumbleweed | apache-commons-fileupload | 1.6.0-1.1 |