Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.3
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.3
Next non-vulnerable version 11.0.9
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-fpgj-82wf-ykbw
Aliases:
CVE-2025-53506
GHSA-25xr-qj8w-c4vf
Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
11.0.9
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-5sgv-7nsz-5fa8 CVE-2025-24813
GHSA-83qj-6fr2-vhqg

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:33:01.456652+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.4.0
2026-04-16T23:22:31.988991+00:00 GitLab Importer Fixing VCID-5sgv-7nsz-5fa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-24813.yml 38.4.0
2026-04-12T00:52:59.951413+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.3.0
2026-04-12T00:41:40.107126+00:00 GitLab Importer Fixing VCID-5sgv-7nsz-5fa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-24813.yml 38.3.0
2026-04-07T04:57:13.085289+00:00 GHSA Importer Fixing VCID-5sgv-7nsz-5fa8 https://github.com/advisories/GHSA-83qj-6fr2-vhqg 38.1.0
2026-04-03T01:01:09.308288+00:00 GitLab Importer Affected by VCID-fpgj-82wf-ykbw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-53506.yml 38.1.0
2026-04-03T00:49:36.104827+00:00 GitLab Importer Fixing VCID-5sgv-7nsz-5fa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-24813.yml 38.1.0
2026-04-02T12:40:58.044420+00:00 GitLab Importer Fixing VCID-5sgv-7nsz-5fa8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2025-24813.yml 38.0.0
2026-04-01T12:56:18.774811+00:00 GithubOSV Importer Fixing VCID-5sgv-7nsz-5fa8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json 38.0.0