Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.39
purl pkg:apache/tomcat@9.0.39
Next non-vulnerable version 9.0.48
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2020-17527

Moderate: HTTP/2 request header mix-up
9.0.40
Vulnerable
CVE-2021-24122

Important: Information disclosure
9.0.40
Vulnerable
CVE-2026-68763

Important: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset
9.0.121
Vulnerable
CVE-2026-77762

Low: Stale HPACK emitter injects trailers into recycled pooled Request
9.0.122
Vulnerable
This package is not known to fix any advisories.