Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.0.0-M7
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@10.0.0-M7
Next non-vulnerable version 10.0.0-M10
Latest non-vulnerable version 11.0.26
Risk score 2.9
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
7.0.107
Not vulnerable
8.5.60
Vulnerable
9.0.40
Vulnerable
10.0.0-M10
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2020-13935
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, …
CVE-2020-13935
Infinite Loop in Apache Tomcat The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 … GHSA-m7jv-hq7h-mq7c
GHSA-m7jv-hq7h-mq7c
Infinite Loop in Apache Tomcat The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 … CVE-2020-13935