Search for packages
purl | pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.2 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-6y3x-kyj7-aaaf
Aliases: CVE-2023-44487 GHSA-qppj-fm5r-hxr3 VSV00013 |
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
Affected by 4 other vulnerabilities. Affected by 3 other vulnerabilities. |
VCID-7tp8-ektn-aaan
Aliases: CVE-2022-42252 GHSA-p22x-g9px-3945 |
Apache Tomcat may reject request containing invalid Content-Length header |
Affected by 1 other vulnerability. Affected by 6 other vulnerabilities. |
VCID-a1en-zn2z-aaab
Aliases: CVE-2021-43980 GHSA-jx7c-7mj5-9438 |
Apache Tomcat Race Condition vulnerability |
Affected by 2 other vulnerabilities. Affected by 6 other vulnerabilities. |
VCID-wqse-hqa4-aaap
Aliases: CVE-2021-33037 GHSA-4vww-mc66-62m6 |
HTTP Request Smuggling in Apache Tomcat |
Affected by 3 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-7nyx-ctuq-aaar | Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat |
CVE-2020-17527
GHSA-vvw4-rfwf-p6hx |
VCID-b48f-8g9g-aaah | Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat |
CVE-2020-13934
GHSA-vf77-8h7g-gghp |
VCID-nj2d-yt1t-aaaj | Infinite Loop in Apache Tomcat |
CVE-2020-13935
GHSA-m7jv-hq7h-mq7c |
VCID-qg8v-amgp-aaad | Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat |
CVE-2020-13943
GHSA-f268-65qc-98vg |