Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.7
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.7
Next non-vulnerable version 10.1.60
Latest non-vulnerable version 11.0.26
Risk score 10.0
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-p22x-g9px-3945
Aliases:
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to …
10.0.27
Vulnerable
GHSA-qppj-fm5r-hxr3
Aliases:
CVE-2023-44487
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that …
10.1.14
Vulnerable
CVE-2022-42252

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') If Apache Tomcat 8.5.0 to 8.5.52, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 …
9.0.68
Vulnerable
10.0.27
Vulnerable
10.1.1
Vulnerable
8.5.83
Vulnerable
CVE-2021-43980

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2021-33037
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Apache Tomcat does not correctly parse the HTTP transfer-encoding request header in …