Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.97
purl pkg:apache/tomcat@9.0.97
Next non-vulnerable version 9.0.99
Latest non-vulnerable version 11.0.21
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-43j2-w5xt-43g9
Aliases:
CVE-2024-56337
GHSA-27hp-xhwr-wr2m
9.0.98
Affected by 1 other vulnerability.
10.1.34
Affected by 1 other vulnerability.
11.0.2
Affected by 1 other vulnerability.
VCID-gvhy-d4gm-57d3
Aliases:
CVE-2024-54677
GHSA-653p-vg55-5652
9.0.98
Affected by 1 other vulnerability.
10.1.34
Affected by 1 other vulnerability.
11.0.2
Affected by 1 other vulnerability.
VCID-v8ku-sjc8-wfga
Aliases:
CVE-2024-50379
GHSA-5j33-cvvr-w245
9.0.98
Affected by 1 other vulnerability.
10.1.34
Affected by 1 other vulnerability.
11.0.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-s24s-sbsx-b3f5 Incorrect object recycling and reuse vulnerability in Apache Tomcat. This issue affects Apache Tomcat: 11.0.0, 10.1.31, 9.0.96. Users are recommended to upgrade to version 11.0.1, 10.1.32 or 9.0.97, which fixes the issue. CVE-2024-52318
GHSA-f632-9449-3j4w

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:38:07.368367+00:00 Apache Tomcat Importer Fixing VCID-s24s-sbsx-b3f5 https://tomcat.apache.org/security-9.html 38.0.0
2026-04-01T12:38:07.337814+00:00 Apache Tomcat Importer Affected by VCID-v8ku-sjc8-wfga https://tomcat.apache.org/security-9.html 38.0.0
2026-04-01T12:38:07.297696+00:00 Apache Tomcat Importer Affected by VCID-gvhy-d4gm-57d3 https://tomcat.apache.org/security-9.html 38.0.0
2026-04-01T12:38:07.256729+00:00 Apache Tomcat Importer Affected by VCID-43j2-w5xt-43g9 https://tomcat.apache.org/security-9.html 38.0.0