Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@8.5.58
purl pkg:maven/org.apache.tomcat/tomcat-util@8.5.58
Next non-vulnerable version 8.5.96
Latest non-vulnerable version 11.0.1
Risk 10.0
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-a1en-zn2z-aaab
Aliases:
CVE-2021-43980
GHSA-jx7c-7mj5-9438
Apache Tomcat Race Condition vulnerability
8.5.78
Affected by 2 other vulnerabilities.
9.0.62
Affected by 3 other vulnerabilities.
10.0.20
Affected by 0 other vulnerabilities.
10.1.1
Affected by 2 other vulnerabilities.
VCID-e318-2aad-aaag
Aliases:
CVE-2023-41080
GHSA-q3mw-pvr8-9ggc
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.
8.5.93
Affected by 1 other vulnerability.
9.0.80
Affected by 1 other vulnerability.
10.1.13
Affected by 1 other vulnerability.
11.0.1
Affected by 0 other vulnerabilities.
VCID-pcvp-wv2z-aaas
Aliases:
CVE-2023-46589
GHSA-fccv-jmmp-qg76
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
8.5.96
Affected by 0 other vulnerabilities.
9.0.83
Affected by 0 other vulnerabilities.
10.1.16
Affected by 0 other vulnerabilities.
11.0.1
Affected by 0 other vulnerabilities.
VCID-w4d3-t13k-aaab
Aliases:
CVE-2021-24122
GHSA-2rvv-w9r2-rg7m
Information Disclosure in Apache Tomcat
8.5.60
Affected by 3 other vulnerabilities.
9.0.40
Affected by 4 other vulnerabilities.
10.0.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:48:40.646743+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.3
2025-06-20T16:40:56.946057+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.3
2025-06-20T16:40:55.809311+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.3
2025-06-20T16:07:48.760315+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.3
2025-06-20T16:07:44.313345+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.3
2025-06-20T14:56:01.395765+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.3
2025-06-20T14:56:01.041896+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.3
2025-06-03T23:26:15.797454+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.0
2025-06-03T23:19:34.281978+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.0
2025-06-03T23:19:33.323544+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.0
2025-06-03T22:47:52.915971+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.0
2025-06-03T22:47:48.814355+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.0
2025-06-03T21:39:32.293086+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.0
2025-06-03T21:39:31.968474+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.0
2025-06-02T23:23:50.663038+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.2
2025-06-02T23:16:39.212281+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.2
2025-06-02T23:16:38.077141+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.2
2025-06-02T22:37:16.962983+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.2
2025-06-02T22:37:11.938257+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.2
2025-06-02T21:22:28.956873+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.2
2025-06-02T21:22:28.574373+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.2
2025-04-03T21:46:42.274964+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.0.0
2025-04-03T21:31:14.679518+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.0.0
2025-04-03T21:31:11.741172+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.0.0
2025-04-03T20:25:35.936587+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.0.0
2025-04-03T20:25:24.166034+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.0.0
2025-04-03T18:07:57.960560+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.0.0
2025-04-03T18:07:56.999018+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.0.0
2025-02-18T01:05:28.325374+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 35.1.0
2025-02-18T01:04:25.562044+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 35.1.0
2025-02-18T01:04:21.001451+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 35.1.0
2025-02-18T00:30:25.724203+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 35.1.0
2025-02-18T00:30:22.626336+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 35.1.0
2025-02-18T00:06:59.044922+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 35.1.0
2025-02-18T00:06:49.082207+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 35.1.0
2024-11-20T23:30:41.444201+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 35.0.0
2024-11-20T23:30:14.987360+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 35.0.0
2024-11-20T23:13:43.464134+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 35.0.0
2024-11-20T23:00:58.347717+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 35.0.0
2024-11-18T23:19:33.683596+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.3.2
2024-11-18T23:19:01.025393+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.3.2
2024-11-18T23:01:20.533786+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.3.2
2024-11-18T22:47:33.462157+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.3.2
2024-10-08T00:16:57.584517+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.2
2024-10-08T00:16:29.804675+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.2
2024-10-08T00:00:22.734580+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.2
2024-10-07T23:47:51.502590+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.2
2024-09-23T00:30:58.818868+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.1
2024-09-23T00:30:33.558329+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.1
2024-09-23T00:14:14.640679+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.1
2024-09-23T00:02:00.274259+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.1
2024-04-24T02:41:51.559466+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc4
2024-04-24T02:41:07.946784+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc4
2024-04-24T02:41:03.311827+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc4
2024-04-24T02:19:07.432555+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc4
2024-04-24T02:19:05.649296+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc4
2024-04-24T02:06:13.346759+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc4
2024-04-24T02:06:06.563729+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc4
2024-01-10T05:17:10.178900+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc2
2024-01-10T05:16:26.602412+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc2
2024-01-10T05:16:21.943687+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc2
2024-01-10T04:53:39.696005+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc2
2024-01-10T04:53:37.969075+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc2
2024-01-10T04:40:10.761392+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc2
2024-01-10T04:40:04.050789+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc2
2024-01-03T22:05:00.433336+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc1
2024-01-03T22:04:16.513631+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc1
2024-01-03T22:04:11.843525+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc1
2024-01-03T21:41:10.270848+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc1
2024-01-03T21:41:08.541295+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc1
2024-01-03T21:27:08.558395+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc1
2024-01-03T21:27:01.831136+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc1