Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@6.0.41
purl pkg:maven/org.apache.tomcat/tomcat@6.0.41
Tags Ghost
Next non-vulnerable version 9.0.117
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-a1by-zvtm-akdc
Aliases:
CVE-2014-0227
GHSA-42j3-498q-m6vp
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.
6.0.42
Affected by 0 other vulnerabilities.
6.0.43
Affected by 2 other vulnerabilities.
7.0.55
Affected by 30 other vulnerabilities.
8.0.9
Affected by 22 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T12:38:16.560858+00:00 Apache Tomcat Importer Fixing VCID-jf7u-dvpd-b7f4 https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.527981+00:00 Apache Tomcat Importer Fixing VCID-ygvw-69am-s7ae https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.497265+00:00 Apache Tomcat Importer Fixing VCID-kgd1-bzst-muh7 https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.468140+00:00 Apache Tomcat Importer Fixing VCID-kzzv-rhya-j7dd https://tomcat.apache.org/security-6.html 38.0.0
2026-04-01T12:38:16.436720+00:00 Apache Tomcat Importer Affected by VCID-a1by-zvtm-akdc https://tomcat.apache.org/security-6.html 38.0.0