Search for packages
purl | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.23 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-59sa-ur8p-aaaa
Aliases: CVE-2021-42340 GHSA-wph7-x527-w3h5 |
Missing Release of Resource after Effective Lifetime in Apache Tomcat |
Affected by 10 other vulnerabilities. |
VCID-6y3x-kyj7-aaaf
Aliases: CVE-2023-44487 GHSA-qppj-fm5r-hxr3 VSV00013 |
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
Affected by 7 other vulnerabilities. Affected by 5 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-7tp8-ektn-aaan
Aliases: CVE-2022-42252 GHSA-p22x-g9px-3945 |
Apache Tomcat may reject request containing invalid Content-Length header |
Affected by 2 other vulnerabilities. Affected by 10 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-c5mx-k2k4-aaag | Cross-site Scripting in Apache Tomcat |
CVE-2022-34305
GHSA-6j88-6whg-x687 |