ALAS2023-2025-965: CVEs fixed (Amazon Linux)

ALAS2023-2025-965 fixes 2 tracked CVEs. Affected systems and fixed versions.

• CVE-2025-31651 CRITICAL 9.8 UPGRADE Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of
• CVE-2025-31650 HIGH 7.5 UPGRADE Improper Input Validation vulnerability in Apache Tomcat

Applies to

• Amazon Linux 2023

← Back to latest CVEs