Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.0%2BM6
purl pkg:apache/tomcat@9.0.0%2BM6
Next non-vulnerable version 9.0.0+M8
Latest non-vulnerable version 11.0.22
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-qthw-u9bp-zkdp
Aliases:
CVE-2016-3092
GHSA-fvm3-cfvj-gxqq
Denial of Service The MultipartStream class in this package allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string.
9.0.0+M8
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T16:25:34.012618+00:00 Apache Tomcat Importer Affected by VCID-qthw-u9bp-zkdp https://tomcat.apache.org/security-9.html 38.6.0