Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.7
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.7
Tags Ghost
Next non-vulnerable version 8.5.99
Latest non-vulnerable version 11.0.8
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-tzx4-sq6x-aaap
Aliases:
CVE-2024-21733
GHSA-f4qf-m5gf-8jm8
Generation of Error Message Containing Sensitive Information vulnerability in Apache Tomcat.This issue affects Apache Tomcat: from 8.5.7 through 8.5.63, from 9.0.0-M11 through 9.0.43. Users are recommended to upgrade to version 8.5.64 onwards or 9.0.44 onwards, which contain a fix for the issue.
8.5.64
Affected by 14 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2024-10-14T21:48:17.632989+00:00 GitLab Importer Affected by VCID-tzx4-sq6x-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat.embed/tomcat-embed-core/CVE-2024-21733.yml 34.0.2
2024-09-17T22:00:07.103833+00:00 GHSA Importer Affected by VCID-tzx4-sq6x-aaap https://github.com/advisories/GHSA-f4qf-m5gf-8jm8 34.0.1
2024-04-23T23:49:11.566224+00:00 GHSA Importer Affected by VCID-tzx4-sq6x-aaap https://github.com/advisories/GHSA-f4qf-m5gf-8jm8 34.0.0rc4
2024-04-23T23:07:47.414165+00:00 GithubOSV Importer Fixing VCID-sc5t-244h-aaas https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-cw54-59pw-4g8c/GHSA-cw54-59pw-4g8c.json 34.0.0rc4
2024-04-23T17:39:16.747384+00:00 GHSA Importer Fixing VCID-sc5t-244h-aaas https://github.com/advisories/GHSA-cw54-59pw-4g8c 34.0.0rc4