Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.13
purl pkg:apache/tomcat@9.0.13
Next non-vulnerable version 9.0.16
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2022-29885

Low: Apache Tomcat EncryptInterceptor DoS
9.0.63
Not vulnerable
CVE-2024-38286

Important: Denial of Service
9.0.90
Vulnerable
CVE-2026-29146

Important: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor
9.0.116
Vulnerable
CVE-2026-34487

Low: Cloud membership for clustering component exposed the Kubernetes bearer token
9.0.117
Vulnerable
CVE-2026-55955

Low: EncryptInterceptor not protected against replay attacks
9.0.119
Vulnerable
CVE-2026-59084

Low: EncryptInterceptor requirements not clearly documented
9.0.120
Vulnerable
This package is not known to fix any advisories.