Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
purl pkg:maven/org.apache.tomcat/tomcat-coyote@8.0.3
Next non-vulnerable version 9.0.122
Latest non-vulnerable version 11.0.26
Risk score 10.0
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-wf5v-jhxj-q632
Aliases:
CVE-2014-0095
Denial of service in Apache Tomcat java/org/apache/coyote/ajp/AbstractAjpProcessor.java in Apache Tomcat 8.x before 8.0.4 allows remote attackers to cause a denial … There are no reported fixed by versions.
GHSA-475f-74wp-pqv5
Aliases:
CVE-2014-0075
Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, … There are no reported fixed by versions.
GHSA-qq5r-98hh-rxc9
Aliases:
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …
9.0.113
Vulnerable
GHSA-qcxh-w3j9-58qr
Aliases:
CVE-2019-0199
Apache Tomcat Denial of Service vulnerability The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted …
8.5.38
Vulnerable
8.5.38
Vulnerable
GHSA-jc7p-5r39-9477
Aliases:
CVE-2016-6816
Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, …
8.0.39
Vulnerable
8.0.39
Vulnerable
8.0.39
Vulnerable
GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
9.0.116
Vulnerable
11.0.20
Vulnerable
9.0.116
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2014-0050
Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …