Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.18
purl pkg:maven/org.apache.tomcat/tomcat-coyote@11.0.18
Next non-vulnerable version 11.0.26
Latest non-vulnerable version 11.0.26
Risk score 4.4
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GHSA-69cc-cv78-qc8g
Aliases:
CVE-2026-29129
Apache Tomcat: Configured cipher preference order not preserved Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue …
11.0.20
Vulnerable
GHSA-r29c-68gh-xp6x
Aliases:
CVE-2026-41293
Apache Tomcat - HTTP/2 request headers not validated Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 …
11.0.22
Vulnerable
GHSA-8mc5-53m5-3qj2
Aliases:
CVE-2026-32990
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix …
11.0.20
Vulnerable
11.0.20
Vulnerable
GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
11.0.20
Vulnerable
11.0.20
Vulnerable
CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is …
9.0.121
Vulnerable
10.1.59
Vulnerable
11.0.25
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-mgp5-rv84-w37q
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using … CVE-2026-24734
CVE-2026-24734
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using … GHSA-mgp5-rv84-w37q