Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.35
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.35
Next non-vulnerable version 10.1.40
Latest non-vulnerable version 11.0.8
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-yzt8-watu-qkcs
Aliases:
CVE-2025-31651
GHSA-ff77-26x5-69cr
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.
10.1.40
Affected by 0 other vulnerabilities.
11.0.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-xwgq-td7d-uydt tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT CVE-2025-24813
GHSA-83qj-6fr2-vhqg

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T17:20:47.627516+00:00 GitLab Importer Affected by VCID-yzt8-watu-qkcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-31651.yml 36.1.3
2025-06-20T17:17:36.257764+00:00 GitLab Importer Fixing VCID-xwgq-td7d-uydt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-24813.yml 36.1.3
2025-06-03T23:55:42.269344+00:00 GitLab Importer Affected by VCID-yzt8-watu-qkcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-31651.yml 36.1.0
2025-06-03T23:52:43.499224+00:00 GitLab Importer Fixing VCID-xwgq-td7d-uydt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-24813.yml 36.1.0
2025-06-02T23:54:36.569648+00:00 GitLab Importer Affected by VCID-yzt8-watu-qkcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-31651.yml 36.1.2
2025-06-02T23:51:33.296242+00:00 GitLab Importer Fixing VCID-xwgq-td7d-uydt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-24813.yml 36.1.2
2025-05-29T23:36:37.233681+00:00 GitLab Importer Affected by VCID-yzt8-watu-qkcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-31651.yml 36.0.0
2025-04-09T15:02:29.264459+00:00 GitLab Importer Fixing VCID-xwgq-td7d-uydt https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-24813.yml 36.0.0
2025-04-04T11:31:56.837221+00:00 GithubOSV Importer Fixing VCID-xwgq-td7d-uydt https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/03/GHSA-83qj-6fr2-vhqg/GHSA-83qj-6fr2-vhqg.json 36.0.0
2025-03-28T20:13:06.674326+00:00 GHSA Importer Fixing VCID-xwgq-td7d-uydt https://github.com/advisories/GHSA-83qj-6fr2-vhqg 36.0.0