Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@11.0.0-M21
purl pkg:maven/org.apache.tomcat/tomcat-util@11.0.0-M21
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-s526-jddr-jqd1 Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. Older, unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue. Apache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process. CVE-2024-38286
GHSA-7jqf-v358-p8g7

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:11:30.678079+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 36.1.3
2025-06-03T23:47:19.983536+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 36.1.0
2025-06-02T23:45:53.517763+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 36.1.2
2025-04-04T11:32:28.156675+00:00 GithubOSV Importer Fixing VCID-s526-jddr-jqd1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-7jqf-v358-p8g7/GHSA-7jqf-v358-p8g7.json 36.0.0
2025-03-29T10:50:01.809720+00:00 GHSA Importer Fixing VCID-s526-jddr-jqd1 https://github.com/advisories/GHSA-7jqf-v358-p8g7 36.0.0
2025-03-28T16:49:22.530343+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 36.0.0
2025-02-18T04:02:07.736123+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 35.1.0
2024-12-13T05:20:39.435917+00:00 GitLab Importer Fixing VCID-s526-jddr-jqd1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2024-38286.yml 35.0.0
2024-11-19T19:45:19.889791+00:00 GHSA Importer Fixing VCID-s526-jddr-jqd1 https://github.com/advisories/GHSA-7jqf-v358-p8g7 34.3.2
2024-11-19T00:43:38.191554+00:00 GithubOSV Importer Fixing VCID-s526-jddr-jqd1 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-7jqf-v358-p8g7/GHSA-7jqf-v358-p8g7.json 34.3.2