Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-websocket@10.1.59
purl pkg:maven/org.apache.tomcat/tomcat-websocket@10.1.59
Next non-vulnerable version 10.1.60
Latest non-vulnerable version 11.0.26
Risk score 2.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2026-87022

Improper Handling of Length Parameter Inconsistency Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling …
10.1.60
Not vulnerable
9.0.122
Not vulnerable
11.0.26
Not vulnerable
CVE-2026-76183

Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. …
10.1.60
Not vulnerable
9.0.122
Not vulnerable
11.0.26
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2026-73180
Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed …