Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@9.0.26
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.26
Next non-vulnerable version 9.0.83
Latest non-vulnerable version 11.0.1
Risk 10.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-259r-tjud-aaad
Aliases:
CVE-2020-1935
GHSA-qxf4-chvg-4r8r
Potential HTTP request smuggling in Apache Tomcat
9.0.31
Affected by 4 other vulnerabilities.
VCID-a1en-zn2z-aaab
Aliases:
CVE-2021-43980
GHSA-jx7c-7mj5-9438
Apache Tomcat Race Condition vulnerability
9.0.62
Affected by 3 other vulnerabilities.
10.0.20
Affected by 0 other vulnerabilities.
10.1.1
Affected by 2 other vulnerabilities.
VCID-e318-2aad-aaag
Aliases:
CVE-2023-41080
GHSA-q3mw-pvr8-9ggc
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 through 8.5.92. The vulnerability is limited to the ROOT (default) web application.
9.0.80
Affected by 1 other vulnerability.
10.1.13
Affected by 1 other vulnerability.
11.0.1
Affected by 0 other vulnerabilities.
VCID-pcvp-wv2z-aaas
Aliases:
CVE-2023-46589
GHSA-fccv-jmmp-qg76
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that exceeded the header size limit could cause Tomcat to treat a single request as multiple requests leading to the possibility of request smuggling when behind a reverse proxy. Users are recommended to upgrade to version 11.0.0-M11 onwards, 10.1.16 onwards, 9.0.83 onwards or 8.5.96 onwards, which fix the issue.
9.0.83
Affected by 0 other vulnerabilities.
10.1.16
Affected by 0 other vulnerabilities.
11.0.1
Affected by 0 other vulnerabilities.
VCID-w4d3-t13k-aaab
Aliases:
CVE-2021-24122
GHSA-2rvv-w9r2-rg7m
Information Disclosure in Apache Tomcat
9.0.40
Affected by 4 other vulnerabilities.
10.0.2
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:48:40.772771+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.3
2025-06-20T16:40:57.046081+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.3
2025-06-20T16:40:55.915470+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.3
2025-06-20T16:07:48.832603+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.3
2025-06-20T16:07:44.380165+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.3
2025-06-20T14:56:01.441004+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.3
2025-06-20T14:56:01.083960+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.3
2025-06-20T14:34:57.483835+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 36.1.3
2025-06-20T14:34:56.781589+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 36.1.3
2025-06-03T23:26:15.883343+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.0
2025-06-03T23:19:34.360240+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.0
2025-06-03T23:19:33.416565+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.0
2025-06-03T22:47:52.985922+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.0
2025-06-03T22:47:48.874593+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.0
2025-06-03T21:39:32.336943+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.0
2025-06-03T21:39:32.009775+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.0
2025-06-03T21:18:45.662140+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 36.1.0
2025-06-03T21:18:44.824884+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 36.1.0
2025-06-02T23:23:50.762275+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.1.2
2025-06-02T23:16:39.307338+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.1.2
2025-06-02T23:16:38.184095+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.1.2
2025-06-02T22:37:17.048301+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.1.2
2025-06-02T22:37:12.003263+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.1.2
2025-06-02T21:22:29.006660+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.1.2
2025-06-02T21:22:28.618687+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.1.2
2025-06-02T20:59:59.688550+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 36.1.2
2025-06-02T20:59:58.766724+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 36.1.2
2025-04-03T21:46:42.557993+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 36.0.0
2025-04-03T21:31:14.935541+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 36.0.0
2025-04-03T21:31:12.007264+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 36.0.0
2025-04-03T20:25:36.127718+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 36.0.0
2025-04-03T20:25:24.362754+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 36.0.0
2025-04-03T18:07:58.078324+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 36.0.0
2025-04-03T18:07:57.111817+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 36.0.0
2025-04-03T17:31:50.487605+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 36.0.0
2025-04-03T17:31:48.604829+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 36.0.0
2025-02-18T01:05:28.601594+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 35.1.0
2025-02-18T01:04:25.823171+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 35.1.0
2025-02-18T01:04:21.254883+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 35.1.0
2025-02-18T00:30:25.919008+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 35.1.0
2025-02-18T00:30:22.814218+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 35.1.0
2025-02-18T00:06:59.155945+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 35.1.0
2025-02-18T00:06:49.200456+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 35.1.0
2025-02-17T23:37:26.789687+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 35.1.0
2025-02-17T23:37:22.061551+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 35.1.0
2024-11-20T23:30:41.727178+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 35.0.0
2024-11-20T23:30:15.256793+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 35.0.0
2024-11-20T23:13:43.665067+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 35.0.0
2024-11-20T23:00:58.481948+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 35.0.0
2024-11-20T22:39:19.141407+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 35.0.0
2024-11-18T23:19:33.969064+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.3.2
2024-11-18T23:19:01.295408+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.3.2
2024-11-18T23:01:20.724312+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.3.2
2024-11-18T22:47:33.577859+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.3.2
2024-11-18T22:30:32.128807+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.3.2
2024-10-08T00:16:57.866060+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.2
2024-10-08T00:16:30.068570+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.2
2024-10-08T00:00:22.922085+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.2
2024-10-07T23:47:51.627358+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.2
2024-10-07T23:31:20.200370+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.0.2
2024-09-23T00:30:59.088454+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.1
2024-09-23T00:30:33.815175+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.1
2024-09-23T00:14:14.834136+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.1
2024-09-23T00:02:00.388448+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.1
2024-09-22T23:45:11.885617+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.0.1
2024-04-24T02:41:51.824714+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc4
2024-04-24T02:41:08.202014+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc4
2024-04-24T02:41:03.553329+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc4
2024-04-24T02:19:07.615294+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc4
2024-04-24T02:19:05.837332+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc4
2024-04-24T02:06:13.452338+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc4
2024-04-24T02:06:06.675575+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc4
2024-04-24T01:47:58.152761+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 34.0.0rc4
2024-04-24T01:47:55.720993+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.0.0rc4
2024-01-10T05:17:10.445288+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc2
2024-01-10T05:16:26.849312+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc2
2024-01-10T05:16:22.184415+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc2
2024-01-10T04:53:39.881100+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc2
2024-01-10T04:53:38.148377+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc2
2024-01-10T04:40:10.871721+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc2
2024-01-10T04:40:04.165984+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc2
2024-01-10T04:19:08.023715+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 34.0.0rc2
2024-01-10T04:19:05.603242+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.0.0rc2
2024-01-03T22:05:00.746088+00:00 GitLab Importer Affected by VCID-pcvp-wv2z-aaas https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-46589.yml 34.0.0rc1
2024-01-03T22:04:16.762893+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2023-41080.yml 34.0.0rc1
2024-01-03T22:04:12.083246+00:00 GitLab Importer Affected by VCID-e318-2aad-aaag None 34.0.0rc1
2024-01-03T21:41:10.456052+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-43980.yml 34.0.0rc1
2024-01-03T21:41:08.720080+00:00 GitLab Importer Affected by VCID-a1en-zn2z-aaab None 34.0.0rc1
2024-01-03T21:27:08.663439+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab None 34.0.0rc1
2024-01-03T21:27:01.940692+00:00 GitLab Importer Affected by VCID-w4d3-t13k-aaab https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2021-24122.yml 34.0.0rc1
2024-01-03T21:03:19.370459+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad None 34.0.0rc1
2024-01-03T21:03:16.937322+00:00 GitLab Importer Affected by VCID-259r-tjud-aaad https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-util/CVE-2020-1935.yml 34.0.0rc1