Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/tomcat9@9.0.43-2~deb11u3?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u3?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-wptr-hkjx-s7c3 The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError. CVE-2021-42340
GHSA-wph7-x527-w3h5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T11:57:24.078657+00:00 Debian Importer Fixing VCID-wptr-hkjx-s7c3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:09:45.087368+00:00 Debian Importer Fixing VCID-wptr-hkjx-s7c3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:55:25.087659+00:00 Debian Importer Fixing VCID-wptr-hkjx-s7c3 https://security-tracker.debian.org/tracker/data/json 38.1.0