Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.96
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.96
Next non-vulnerable version 9.0.122
Latest non-vulnerable version 11.0.26
Risk score 3.9
Vulnerabilities affecting this package (9)
Advisory Summary Fixed in package version
CVE-2020-1938

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats …
9.0.31
Vulnerable
9.0.33
Vulnerable
9.0.35
Vulnerable
8.5.51
Vulnerable
8.5.53
Vulnerable
8.5.55
Vulnerable
8.5.56
Vulnerable
8.5.57
Vulnerable
7.0.100
Vulnerable
7.0.103
Vulnerable
7.0.104
Vulnerable
9.0.34
Vulnerable
9.0.36
Vulnerable
9.0.37
Vulnerable
CVE-2020-1935

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an …
9.0.31
Vulnerable
9.0.33
Vulnerable
9.0.35
Vulnerable
8.5.51
Vulnerable
8.5.53
Vulnerable
8.5.55
Vulnerable
8.5.56
Vulnerable
8.5.57
Vulnerable
7.0.100
Vulnerable
7.0.103
Vulnerable
7.0.104
Vulnerable
7.0.105
Vulnerable
9.0.34
Vulnerable
9.0.36
Vulnerable
9.0.37
Vulnerable
CVE-2020-1938

Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache …
9.0.31
Vulnerable
8.5.51
Vulnerable
7.0.100
Vulnerable
CVE-2020-13935

Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache …
8.5.57
Vulnerable
7.0.105
Vulnerable
9.0.37
Vulnerable
10.0.2
Vulnerable
CVE-2020-1935

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code …
9.0.31
Vulnerable
8.5.51
Vulnerable
7.0.100
Vulnerable
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
10.0.0-M10
Vulnerable
9.0.40
Vulnerable
8.5.60
Vulnerable
7.0.107
Vulnerable
GHSA-qq5r-98hh-rxc9
Aliases:
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …
9.0.113
Vulnerable
GHSA-7jqf-v358-p8g7
Aliases:
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability Allocation of Resources Without Limits or Throttling vulnerability in Apache … There are no reported fixed by versions.
GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
9.0.116
Vulnerable
11.0.20
Vulnerable
9.0.116
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The …
CVE-2018-1336
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the …