Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.107 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-gqp3-2cvr-x8m3
Aliases: CVE-2025-48989 |
Apache Tomcat Improper Resource Shutdown or Release vulnerability Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable … |
Vulnerable |
|
GHSA-mgp5-rv84-w37q
Aliases: CVE-2026-24734 |
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using … |
Vulnerable |
|
GHSA-qq5r-98hh-rxc9
Aliases: CVE-2026-24733 |
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 … |
Vulnerable |
|
CVE-2025-48989
Aliases: GHSA-gqp3-2cvr-x8m3 |
Apache Tomcat Improper Resource Shutdown or Release vulnerability Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable … |
Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-r29c-68gh-xp6x
Aliases: CVE-2026-41293 |
Apache Tomcat - HTTP/2 request headers not validated Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 … |
Vulnerable |
|
GHSA-fpj8-gq4v-p354
Aliases: CVE-2025-66614 |
Apache Tomcat - Client certificate verification bypass Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, … |
Vulnerable Vulnerable |
|
GHSA-563x-q5rq-57qp
Aliases: CVE-2026-24880 |
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-68763
|
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is … |
Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-25xr-qj8w-c4vf
|
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Uncontrolled Resource Consumption vulnerability in Apache Tomcat if … |
CVE-2025-53506
|
|
GHSA-4j3c-42xv-3f84
|
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector Concurrent Execution using Shared Resource with Improper Synchronization … |
CVE-2025-52434
|
|
CVE-2025-52434
|
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector Concurrent Execution using Shared Resource with Improper Synchronization … |
GHSA-4j3c-42xv-3f84
|
|
CVE-2025-53506
|
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Uncontrolled Resource Consumption vulnerability in Apache Tomcat if … |
GHSA-25xr-qj8w-c4vf
|