Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@9.0.107
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.107
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-e1kv-qs89-9bgv Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 9.0.107, which fixes the issue. CVE-2025-52434
GHSA-4j3c-42xv-3f84

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-12T00:56:00.109441+00:00 GithubOSV Importer Fixing VCID-e1kv-qs89-9bgv https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/07/GHSA-4j3c-42xv-3f84/GHSA-4j3c-42xv-3f84.json 37.0.0
2025-07-11T20:33:43.515050+00:00 GHSA Importer Fixing VCID-e1kv-qs89-9bgv https://github.com/advisories/GHSA-4j3c-42xv-3f84 37.0.0