CLEANSTART-2026-BW01609: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat

Q: Does the available advisory identify affected or fixed versions?

No. The provided record identifies the cleanstart/wso2mi software entry and references CVE-2025-55754, but it does not list affected versions, fixed versions, or patch availability.

Q: Does the available information say whether default deployments are affected or what attacker access is required?

No. The record does not describe deployment conditions, default configuration exposure, attack prerequisites, or exploitation steps.

Published Nov 7, 2026

Updated

Security vulnerability affects the wso2mi package. Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat.

Affected Software

3 affected componentsFixes available

cleanstart/wso2mi<4.3.0-r0

4.3.0-r0

cleanstart/wso2mi<4.4.0-r0

4.4.0-r0

cleanstart/wso2mi<4.5.0-r0

4.5.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.3.0-r0
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.4.0-r0
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.5.0-r0

Event History

Nov 7, 2026

Advisory Published

via OSV·12:36 AM

Data Sourced

via OSV·12:36 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2025-55754

Frequently Asked Questions

Does the available advisory identify affected or fixed versions?

No. The provided record identifies the cleanstart/wso2mi software entry and references CVE-2025-55754, but it does not list affected versions, fixed versions, or patch availability.

Does the available information say whether default deployments are affected or what attacker access is required?

No. The record does not describe deployment conditions, default configuration exposure, attack prerequisites, or exploitation steps.

CLEANSTART-2026-BW01609: Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does the available advisory identify affected or fixed versions?

Does the available information say whether default deployments are affected or what attacker access is required?

Company

Resources

Contact

Frequently Asked Questions

Does the available advisory identify affected or fixed versions?

Does the available information say whether default deployments are affected or what attacker access is required?