Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.2
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.2
Next non-vulnerable version 11.0.9
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fpgj-82wf-ykbw
Aliases:
CVE-2025-53506
GHSA-25xr-qj8w-c4vf
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
11.0.9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-43j2-w5xt-43g9 CVE-2024-56337
GHSA-27hp-xhwr-wr2m
VCID-v8ku-sjc8-wfga CVE-2024-50379
GHSA-5j33-cvvr-w245

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:33:01.453235+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.4.0
2026-04-16T23:17:39.342334+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.4.0
2026-04-16T23:17:09.218042+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.4.0
2026-04-12T00:52:59.947824+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.3.0
2026-04-12T00:36:26.835337+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.3.0
2026-04-12T00:35:54.830170+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.3.0
2026-04-07T04:56:41.503148+00:00 GHSA Importer Fixing VCID-43j2-w5xt-43g9 https://github.com/advisories/GHSA-27hp-xhwr-wr2m 38.1.0
2026-04-07T04:56:39.195721+00:00 GHSA Importer Fixing VCID-v8ku-sjc8-wfga https://github.com/advisories/GHSA-5j33-cvvr-w245 38.1.0
2026-04-03T01:01:09.304514+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.1.0
2026-04-03T00:44:15.039335+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.1.0
2026-04-03T00:43:41.592939+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.1.0
2026-04-02T12:40:35.555685+00:00 GitLab Importer Fixing VCID-43j2-w5xt-43g9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-56337.yml 38.0.0
2026-04-02T12:40:34.108004+00:00 GitLab Importer Fixing VCID-v8ku-sjc8-wfga https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-50379.yml 38.0.0
2026-04-01T12:50:16.778283+00:00 GithubOSV Importer Fixing VCID-43j2-w5xt-43g9 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-27hp-xhwr-wr2m/GHSA-27hp-xhwr-wr2m.json 38.0.0
2026-04-01T12:50:16.382375+00:00 GithubOSV Importer Fixing VCID-v8ku-sjc8-wfga https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-5j33-cvvr-w245/GHSA-5j33-cvvr-w245.json 38.0.0