Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.34
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.34
Next non-vulnerable version 10.1.43
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fpgj-82wf-ykbw
Aliases:
CVE-2025-53506
GHSA-25xr-qj8w-c4vf
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
10.1.43
Affected by 0 other vulnerabilities.
11.0.9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-43j2-w5xt-43g9 CVE-2024-56337
GHSA-27hp-xhwr-wr2m
VCID-v8ku-sjc8-wfga CVE-2024-50379
GHSA-5j33-cvvr-w245

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:33:01.319900+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.4.0
2026-04-16T23:17:39.320454+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.4.0
2026-04-16T23:17:09.192515+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.4.0
2026-04-12T00:52:59.808240+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.3.0
2026-04-12T00:36:26.811119+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.3.0
2026-04-12T00:35:54.798574+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.3.0
2026-04-07T04:56:41.371759+00:00 GHSA Importer Fixing VCID-43j2-w5xt-43g9 https://github.com/advisories/GHSA-27hp-xhwr-wr2m 38.1.0
2026-04-07T04:56:39.017722+00:00 GHSA Importer Fixing VCID-v8ku-sjc8-wfga https://github.com/advisories/GHSA-5j33-cvvr-w245 38.1.0
2026-04-03T01:01:09.165001+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.1.0
2026-04-03T00:44:15.019246+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.1.0
2026-04-03T00:43:41.566860+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.1.0
2026-04-02T12:40:35.559018+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.0.0
2026-04-02T12:40:34.112061+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.0.0
2026-04-01T12:50:16.807088+00:00 GithubOSV Importer Fixing VCID-43j2-w5xt-43g9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-27hp-xhwr-wr2m/GHSA-27hp-xhwr-wr2m.json 38.0.0
2026-04-01T12:50:16.447822+00:00 GithubOSV Importer Fixing VCID-v8ku-sjc8-wfga https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-5j33-cvvr-w245/GHSA-5j33-cvvr-w245.json 38.0.0