<reportApi _class='io.jenkins.plugins.analysis.core.restapi.ReportApi'><issue><addedAt>0</addedAt><authorEmail>-</authorEmail><authorName>-</authorName><baseName>catalina.jar</baseName><category></category><columnEnd>0</columnEnd><columnStart>0</columnStart><commit>-</commit><description></description><fileName>/usr/local/tomcat/lib/catalina.jar</fileName><fingerprint>FALLBACK-66a9e9cb</fingerprint><lineEnd>1</lineEnd><lineStart>1</lineStart><message>CVE-2026-29129: LanguageSpecificPackageVulnerability

Configured cipher preference order not preserved vulnerability in Apac ...

For additional help see: **Vulnerability CVE-2026-29129**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|org.apache.tomcat:tomcat-catalina|9.0.116, 10.1.53, 11.0.20|[CVE-2026-29129](https://avd.aquasec.com/nvd/cve-2026-29129)|

Configured cipher preference order not preserved vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115.

Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

Package: org.apache.tomcat:tomcat-catalina
Installed Version: 9.0.115
Vulnerability CVE-2026-29129
Severity: HIGH
Fixed Version: 9.0.116, 10.1.53, 11.0.20
Link: [CVE-2026-29129](https://avd.aquasec.com/nvd/cve-2026-29129)</message><moduleName></moduleName><origin>trivy</origin><originName>Trivy Security Scanner</originName><packageName>-</packageName><reference>1398</reference><severity>HIGH</severity><toString>catalina.jar(1,0): CVE-2026-29129: : CVE-2026-29129: LanguageSpecificPackageVulnerability

Configured cipher preference order not preserved vulnerability in Apac ...

For additional help see: **Vulnerability CVE-2026-29129**
| Severity | Package | Fixed Version | Link |
| --- | --- | --- | --- |
|HIGH|org.apache.tomcat:tomcat-catalina|9.0.116, 10.1.53, 11.0.20|[CVE-2026-29129](https://avd.aquasec.com/nvd/cve-2026-29129)|

Configured cipher preference order not preserved vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.16 through 11.0.18, from 10.1.51 through 10.1.52, from 9.0.114 through 9.0.115.

Users are recommended to upgrade to version 11.0.20, 10.1.53 or 9.0.116, which fix the issue.

Package: org.apache.tomcat:tomcat-catalina
Installed Version: 9.0.115
Vulnerability CVE-2026-29129
Severity: HIGH
Fixed Version: 9.0.116, 10.1.53, 11.0.20
Link: [CVE-2026-29129](https://avd.aquasec.com/nvd/cve-2026-29129)</toString><type>CVE-2026-29129</type></issue><size>1</size><toString>1 warning (high: 1)</toString></reportApi>