Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@10.1.0-M1
purl pkg:maven/org.apache.tomcat/tomcat-util@10.1.0-M1
Next non-vulnerable version 10.1.16
Latest non-vulnerable version 11.0.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-u6f8-n1an-87hz
Aliases:
CVE-2024-38286
GHSA-7jqf-v358-p8g7
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.13 through 9.0.89. Older, unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25, or 9.0.90, which fixes the issue. Apache Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.
10.1.25
Affected by 0 other vulnerabilities.
11.0.0-M21
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-31T12:39:17.664815+00:00 GHSA Importer Affected by VCID-u6f8-n1an-87hz https://github.com/advisories/GHSA-7jqf-v358-p8g7 37.0.0