VulnerableCode Package Details - pkg:apache/tomcat@10.1.52

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:apache/tomcat@10.1.52

Essentials

purl	pkg:apache/tomcat@10.1.52

Next non-vulnerable version	10.1.61
Latest non-vulnerable version	11.0.27
Risk score

Vulnerabilities affecting this package (6)

Advisory	Summary	Fixed in package version
CVE-2025-66614	Moderate: The fix for CVE-2025-66614 was incomplete	10.1.53 Vulnerable
CVE-2026-24880	Low: Request smuggling via invalid chunk extension	10.1.53 Vulnerable
CVE-2026-25854	Low: Occasionally open redirect	10.1.53 Vulnerable
CVE-2026-29129	Low: Configured TLS cipher preference order not preserved	10.1.53 Vulnerable
CVE-2026-29145	Moderate: OCSP checks sometimes soft-fail even when soft-fail is disabled	10.1.53 Vulnerable
CVE-2026-29146	Important: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor	10.1.53 Vulnerable

Vulnerabilities fixed by this package (1)

Advisory	Summary	Aliases
CVE-2026-24734	Moderate: Incomplete OCSP verification checks