Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.25
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.25
Next non-vulnerable version 10.1.40
Latest non-vulnerable version 11.0.6
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ckkm-g4kc-tfbg
Aliases:
CVE-2025-31650
GHSA-3p2h-wqq4-wf4h
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service. This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5. Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.
10.1.40
Affected by 0 other vulnerabilities.
11.0.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-yktk-48uz-aaac Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue. CVE-2024-34750
GHSA-wm9w-rjj3-j356

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:20:50.051263+00:00 GitLab Importer Affected by VCID-ckkm-g4kc-tfbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2025-31650.yml 36.1.3
2025-06-20T17:04:36.109428+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 36.1.3
2025-06-05T17:12:10.842405+00:00 GHSA Importer Fixing VCID-yktk-48uz-aaac https://github.com/advisories/GHSA-wm9w-rjj3-j356 36.1.0
2025-06-05T14:56:40.999707+00:00 GithubOSV Importer Fixing VCID-yktk-48uz-aaac https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-wm9w-rjj3-j356/GHSA-wm9w-rjj3-j356.json 36.1.0
2025-06-03T23:55:44.139038+00:00 GitLab Importer Affected by VCID-ckkm-g4kc-tfbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2025-31650.yml 36.1.0
2025-06-03T23:40:54.320405+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 36.1.0
2025-06-02T23:54:38.754715+00:00 GitLab Importer Affected by VCID-ckkm-g4kc-tfbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2025-31650.yml 36.1.2
2025-06-02T23:39:10.298350+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 36.1.2
2025-05-29T23:36:39.721785+00:00 GitLab Importer Affected by VCID-ckkm-g4kc-tfbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2025-31650.yml 36.0.0
2025-04-03T22:17:31.714854+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 36.0.0
2025-02-18T03:59:19.087763+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 35.1.0
2024-11-21T01:09:39.308782+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 35.0.0
2024-11-19T00:58:23.451580+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 34.3.2
2024-10-15T19:29:59.780522+00:00 GithubOSV Importer Fixing VCID-yktk-48uz-aaac https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-wm9w-rjj3-j356/GHSA-wm9w-rjj3-j356.json 34.0.2
2024-10-08T01:36:12.528291+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 34.0.2
2024-10-07T22:14:45.548998+00:00 GHSA Importer Fixing VCID-yktk-48uz-aaac https://github.com/advisories/GHSA-wm9w-rjj3-j356 34.0.2
2024-09-18T09:20:19.606479+00:00 GithubOSV Importer Fixing VCID-yktk-48uz-aaac https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-wm9w-rjj3-j356/GHSA-wm9w-rjj3-j356.json 34.0.1
2024-09-17T22:36:25.449508+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 34.0.1
2024-09-17T21:59:53.996549+00:00 GHSA Importer Fixing VCID-yktk-48uz-aaac https://github.com/advisories/GHSA-wm9w-rjj3-j356 34.0.1
2024-08-02T19:10:03.899156+00:00 GitLab Importer Fixing VCID-yktk-48uz-aaac https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2024-34750.yml 34.0.0rc4
2024-07-06T02:04:09.832625+00:00 GHSA Importer Fixing VCID-yktk-48uz-aaac https://github.com/advisories/GHSA-wm9w-rjj3-j356 34.0.0rc4
2024-07-06T01:33:27.306564+00:00 GithubOSV Importer Fixing VCID-yktk-48uz-aaac https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/07/GHSA-wm9w-rjj3-j356/GHSA-wm9w-rjj3-j356.json 34.0.0rc4