Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@9.0.0-M1
Tags Ghost
Next non-vulnerable version 9.0.83
Latest non-vulnerable version 11.0.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-g7xq-ftd5-dfeb
Aliases:
CVE-2024-23672
GHSA-v682-8vv8-vpwr
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.
9.0.86
Affected by 0 other vulnerabilities.
10.1.19
Affected by 0 other vulnerabilities.
11.0.0-M17
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T12:37:01.754085+00:00 GHSA Importer Affected by VCID-g7xq-ftd5-dfeb https://github.com/advisories/GHSA-v682-8vv8-vpwr 37.0.0