Search for packages
| purl | pkg:deb/debian/tomcat9@9.0.37-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-dzan-r49k-kqab | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service. |
CVE-2020-13934
GHSA-vf77-8h7g-gghp |
| VCID-nvbx-q971-skgm | The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service. |
CVE-2020-13935
GHSA-m7jv-hq7h-mq7c |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:48:27.710333+00:00 | Debian Importer | Fixing | VCID-nvbx-q971-skgm | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T12:37:20.546925+00:00 | Debian Importer | Fixing | VCID-dzan-r49k-kqab | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:47:11.904456+00:00 | Debian Importer | Fixing | VCID-nvbx-q971-skgm | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T08:38:52.804258+00:00 | Debian Importer | Fixing | VCID-dzan-r49k-kqab | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:55:24.478159+00:00 | Debian Importer | Fixing | VCID-nvbx-q971-skgm | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:55:24.437947+00:00 | Debian Importer | Fixing | VCID-dzan-r49k-kqab | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |