org.apache.tomcat.embed:tomcat-embed-core

Every figure here counts codebases where this package was SEEN carrying an advisory. A codebase whose advisory list was cut short may carry it without being counted.