Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat@7.0.21
purl pkg:maven/org.apache.tomcat/tomcat@7.0.21
Tags Ghost
Next non-vulnerable version 9.0.117
Latest non-vulnerable version 11.0.21
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-hxj6-mupf-abbc
Aliases:
CVE-2011-3375
GHSA-rp8h-vr48-4j8p
Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.
7.0.22
Affected by 1 other vulnerability.
VCID-j2j9-avuw-n3eq
Aliases:
CVE-2011-3376
org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the Manager application, which allows local users to gain privileges by using an untrusted web application to access the Manager application's functionality.
7.0.22
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:30:28.390792+00:00 GHSA Importer Fixing VCID-quwu-ep21-cyew https://github.com/advisories/GHSA-c38m-v4m2-524v 38.1.0
2026-04-01T13:09:31.452796+00:00 GithubOSV Importer Fixing VCID-quwu-ep21-cyew https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c38m-v4m2-524v/GHSA-c38m-v4m2-524v.json 38.0.0
2026-04-01T12:50:31.531593+00:00 GitLab Importer Fixing VCID-quwu-ep21-cyew https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat/CVE-2011-3190.yml 38.0.0
2026-04-01T12:38:15.492131+00:00 Apache Tomcat Importer Fixing VCID-quwu-ep21-cyew https://tomcat.apache.org/security-7.html 38.0.0
2026-04-01T12:38:15.458643+00:00 Apache Tomcat Importer Affected by VCID-j2j9-avuw-n3eq https://tomcat.apache.org/security-7.html 38.0.0
2026-04-01T12:38:15.427004+00:00 Apache Tomcat Importer Affected by VCID-hxj6-mupf-abbc https://tomcat.apache.org/security-7.html 38.0.0