Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M2
purl pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M2
Tags Ghost
Next non-vulnerable version 11.0.6
Latest non-vulnerable version 11.0.8
Risk 4.4
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-yzt8-watu-qkcs
Aliases:
CVE-2025-31651
GHSA-ff77-26x5-69cr
Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset of unlikely rewrite rule configurations, it was possible for a specially crafted request to bypass some rewrite rules. If those rewrite rules effectively enforced security constraints, those constraints could be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.5, from 10.1.0-M1 through 10.1.39, from 9.0.0.M1 through 9.0.102. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.
11.0.6
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-05-29T00:08:25.710637+00:00 GitLab Importer Affected by VCID-yzt8-watu-qkcs https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-catalina/CVE-2025-31651.yml 36.0.0
2025-04-29T20:43:37.361583+00:00 GHSA Importer Affected by VCID-yzt8-watu-qkcs https://github.com/advisories/GHSA-ff77-26x5-69cr 36.0.0