Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0
Tags Ghost
Next non-vulnerable version 9.0.104
Latest non-vulnerable version 11.0.6
Risk 10.0
Vulnerabilities affecting this package (14)
Vulnerability Summary Fixed by
VCID-259r-tjud-aaad
Aliases:
CVE-2020-1935
GHSA-qxf4-chvg-4r8r
Potential HTTP request smuggling in Apache Tomcat
9.0.31
Affected by 16 other vulnerabilities.
VCID-2xpy-bz6f-aaak
Aliases:
CVE-2020-1938
GHSA-c9hw-wf7x-jp9j
Improper Privilege Management in Tomcat
9.0.31
Affected by 16 other vulnerabilities.
VCID-6y3x-kyj7-aaaf
Aliases:
CVE-2023-44487
GHSA-qppj-fm5r-hxr3
VSV00013
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
9.0.81
Affected by 4 other vulnerabilities.
10.1.14
Affected by 4 other vulnerabilities.
11.0.0-M12
Affected by 3 other vulnerabilities.
VCID-7nyx-ctuq-aaar
Aliases:
CVE-2020-17527
GHSA-vvw4-rfwf-p6hx
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
9.0.40
Affected by 10 other vulnerabilities.
10.0.0-M10
Affected by 1 other vulnerability.
10.0.2
Affected by 4 other vulnerabilities.
VCID-7tp8-ektn-aaan
Aliases:
CVE-2022-42252
GHSA-p22x-g9px-3945
Apache Tomcat may reject request containing invalid Content-Length header
9.0.68
Affected by 6 other vulnerabilities.
10.0.27
Affected by 1 other vulnerability.
10.1.1
Affected by 6 other vulnerabilities.
VCID-a1en-zn2z-aaab
Aliases:
CVE-2021-43980
GHSA-jx7c-7mj5-9438
Apache Tomcat Race Condition vulnerability
9.0.62
Affected by 7 other vulnerabilities.
10.0.20
Affected by 2 other vulnerabilities.
10.1.1
Affected by 6 other vulnerabilities.
VCID-b48f-8g9g-aaah
Aliases:
CVE-2020-13934
GHSA-vf77-8h7g-gghp
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
9.0.37
Affected by 13 other vulnerabilities.
10.0.2
Affected by 4 other vulnerabilities.
VCID-e318-2aad-aaag
Aliases:
CVE-2023-41080
GHSA-q3mw-pvr8-9ggc
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.
9.0.80
Affected by 5 other vulnerabilities.
10.1.13
Affected by 5 other vulnerabilities.
11.0.1
Affected by 1 other vulnerability.
VCID-garj-878k-aaab
Aliases:
CVE-2020-11996
GHSA-53hp-jpwq-2jgq
Uncontrolled Resource Consumption in Apache Tomcat
9.0.36
Affected by 15 other vulnerabilities.
VCID-nj2d-yt1t-aaaj
Aliases:
CVE-2020-13935
GHSA-m7jv-hq7h-mq7c
Infinite Loop in Apache Tomcat
9.0.37
Affected by 13 other vulnerabilities.
10.0.2
Affected by 4 other vulnerabilities.
VCID-pcvp-wv2z-aaas
Aliases:
CVE-2023-46589
GHSA-fccv-jmmp-qg76
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
9.0.83
Affected by 3 other vulnerabilities.
10.1.16
Affected by 3 other vulnerabilities.
11.0.1
Affected by 1 other vulnerability.
VCID-qg8v-amgp-aaad
Aliases:
CVE-2020-13943
GHSA-f268-65qc-98vg
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
9.0.38
Affected by 12 other vulnerabilities.
10.0.0-M8
Affected by 3 other vulnerabilities.
10.0.2
Affected by 4 other vulnerabilities.
VCID-w4d3-t13k-aaab
Aliases:
CVE-2021-24122
GHSA-2rvv-w9r2-rg7m
Information Disclosure in Apache Tomcat
9.0.40
Affected by 10 other vulnerabilities.
10.0.0-M10
Affected by 1 other vulnerability.
VCID-wqse-hqa4-aaap
Aliases:
CVE-2021-33037
GHSA-4vww-mc66-62m6
HTTP Request Smuggling in Apache Tomcat
9.0.48
Affected by 8 other vulnerabilities.
10.0.7
Affected by 3 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-09T22:37:46.317433+00:00 GHSA Importer Affected by VCID-6y3x-kyj7-aaaf https://github.com/advisories/GHSA-qppj-fm5r-hxr3 36.1.0
2025-03-29T10:49:33.502731+00:00 GHSA Importer Affected by VCID-6y3x-kyj7-aaaf https://github.com/advisories/GHSA-qppj-fm5r-hxr3 36.0.0
2025-01-16T23:28:31.709663+00:00 GitLab Importer Affected by VCID-7tp8-ektn-aaan None 35.1.0
2025-01-16T23:28:23.124972+00:00 GitLab Importer Affected by VCID-wqse-hqa4-aaap None 35.1.0
2024-12-23T15:31:39.141003+00:00 GHSA Importer Affected by VCID-6y3x-kyj7-aaaf https://github.com/advisories/GHSA-qppj-fm5r-hxr3 35.0.0
2024-09-17T22:36:27.018171+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-24122.yml 34.0.1
2024-09-17T22:36:26.839020+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-43980.yml 34.0.1
2024-09-17T22:36:26.714181+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2023-46589.yml 34.0.1
2024-09-17T22:36:26.645040+00:00 GitLab Importer Affected by VCID-garj-878k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-11996.yml 34.0.1
2024-09-17T22:36:26.483026+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-1935.yml 34.0.1
2024-09-17T22:36:25.519176+00:00 GitLab Importer Affected by VCID-7nyx-ctuq-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-17527.yml 34.0.1
2024-09-17T22:36:25.299439+00:00 GitLab Importer Affected by VCID-wqse-hqa4-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-33037.yml 34.0.1
2024-09-17T22:36:25.214966+00:00 GitLab Importer Affected by VCID-b48f-8g9g-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13934.yml 34.0.1
2024-09-17T22:36:25.094043+00:00 GitLab Importer Affected by VCID-qg8v-amgp-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13943.yml 34.0.1
2024-09-17T22:36:24.892283+00:00 GitLab Importer Affected by VCID-nj2d-yt1t-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13935.yml 34.0.1
2024-09-17T22:36:24.712600+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2023-41080.yml 34.0.1
2024-09-17T22:36:24.411817+00:00 GitLab Importer Affected by VCID-2xpy-bz6f-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-1938.yml 34.0.1
2024-09-17T22:36:24.186964+00:00 GitLab Importer Affected by VCID-7tp8-ektn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2022-42252.yml 34.0.1
2024-09-17T21:59:47.573061+00:00 GHSA Importer Affected by VCID-6y3x-kyj7-aaaf https://github.com/advisories/GHSA-qppj-fm5r-hxr3 34.0.1
2024-08-07T21:25:42.019713+00:00 GHSA Importer Affected by VCID-6y3x-kyj7-aaaf https://github.com/advisories/GHSA-qppj-fm5r-hxr3 34.0.0rc4
2024-01-03T17:59:32.509687+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-24122.yml 34.0.0rc1
2024-01-03T17:59:32.368070+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-43980.yml 34.0.0rc1
2024-01-03T17:59:32.243657+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2023-46589.yml 34.0.0rc1
2024-01-03T17:59:32.178927+00:00 GitLab Importer Affected by VCID-garj-878k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-11996.yml 34.0.0rc1
2024-01-03T17:59:32.017515+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-1935.yml 34.0.0rc1
2024-01-03T17:59:31.146272+00:00 GitLab Importer Affected by VCID-7nyx-ctuq-aaar https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-17527.yml 34.0.0rc1
2024-01-03T17:59:31.044221+00:00 GitLab Importer Affected by VCID-wqse-hqa4-aaap https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2021-33037.yml 34.0.0rc1
2024-01-03T17:59:30.965564+00:00 GitLab Importer Affected by VCID-b48f-8g9g-aaah https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13934.yml 34.0.0rc1
2024-01-03T17:59:30.858139+00:00 GitLab Importer Affected by VCID-qg8v-amgp-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13943.yml 34.0.0rc1
2024-01-03T17:59:30.686982+00:00 GitLab Importer Affected by VCID-nj2d-yt1t-aaaj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-13935.yml 34.0.0rc1
2024-01-03T17:59:30.533653+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2023-41080.yml 34.0.0rc1
2024-01-03T17:59:30.311277+00:00 GitLab Importer Affected by VCID-2xpy-bz6f-aaak https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2020-1938.yml 34.0.0rc1
2024-01-03T17:59:30.149954+00:00 GitLab Importer Affected by VCID-7tp8-ektn-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-coyote/CVE-2022-42252.yml 34.0.0rc1