Security · High impactFan score 42 · Tier B
Apache TomEE: 38 CVEs addressed in 10.3.0 and 11.0.0-M2 (combined announcement)
The Brief
- On 10 November 2026, the Apache TomEE project published 38 security advisories.
- Apache TomEE 10.3.0 and 11.0.0-M2 fix 26 of the vulnerabilities.
- The available source excerpt does not describe the remaining 12.
Why it matters
Developers running Apache TomEE should check which of the 38 advisories affect their deployed version and move to a fixed release.
Who’s affected
- Apache TomEE users
What to do
- Upgrade Apache TomEE to 10.3.0 or 11.0.0-M2, or a later fixed release, and review the individual advisories for the remaining vulnerabilities.
Posted by Markus Jung on Nov 12 On 10 November 2026, the Apache TomEE project published 38 security advisories on users () tomee apache org. This message consolidates those announcements for oss-security. Apache TomEE 10.3.0 and 11.0.0-M2 fix 26 of the vulnerabilities. The other…
Timeline
Apache TomEE project published 38 security advisories
Open Source Security
Apache TomEE: 38 CVEs addressed in 10.3.0 and 11.0.0-M2 (combined announcement)