Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.9
purl pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.9
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-9mg7-cusq-kbbt Uncontrolled Resource Consumption vulnerability in Apache Tomcat if an HTTP/2 client did not acknowledge the initial settings frame that reduces the maximum permitted concurrent streams. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue. CVE-2025-53506
GHSA-25xr-qj8w-c4vf

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-12T00:55:59.886163+00:00 GithubOSV Importer Fixing VCID-9mg7-cusq-kbbt https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-25xr-qj8w-c4vf/GHSA-25xr-qj8w-c4vf.json 37.0.0
2025-07-11T20:33:43.595887+00:00 GHSA Importer Fixing VCID-9mg7-cusq-kbbt https://github.com/advisories/GHSA-25xr-qj8w-c4vf 37.0.0