Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.0%2BM8
purl pkg:apache/tomcat@9.0.0%2BM8
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-qthw-u9bp-zkdp Denial of Service The MultipartStream class in this package allows remote attackers to cause a denial of service (CPU consumption) via a long boundary string. CVE-2016-3092
GHSA-fvm3-cfvj-gxqq

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T16:25:34.017565+00:00 Apache Tomcat Importer Fixing VCID-qthw-u9bp-zkdp https://tomcat.apache.org/security-9.html 38.6.0