Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-p22x-g9px-3945
Aliases: CVE-2022-42252 |
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to … |
Vulnerable |
|
GHSA-qppj-fm5r-hxr3
Aliases: CVE-2023-44487 |
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … |
Vulnerable |
|
CVE-2022-42252
|
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') If Apache Tomcat 8.5.0 to 8.5.52, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-33037
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Apache Tomcat does not correctly parse the HTTP transfer-encoding request header in … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2020-13935
|
Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache … | |
|
CVE-2020-17527
|
Information Exposure While investigating bug it was discovered that Apache Tomcat to to to could re-use an HTTP request header … | |
|
GHSA-j39c-c8hj-x4j3
|
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat When responding to new h2c connection requests, Apache Tomcat … |
CVE-2021-25122
|