Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:apache/tomcat@9.0.92
purl pkg:apache/tomcat@9.0.92
Next non-vulnerable version 9.0.99
Latest non-vulnerable version 11.0.27
Risk score
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
CVE-2024-52317

Important: Request and/or response mix-up
9.0.96
Vulnerable
CVE-2026-34500

Moderate: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled
9.0.117
Vulnerable
CVE-2026-74048

Low: OpenSSL-FFM FIPS failure does not prevent start-up
9.0.123
Not vulnerable
CVE-2026-86248

Moderate: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled
9.0.122
Vulnerable
CVE-2026-88041

Low: HTTP/2 trailer header cross-contamination
9.0.123
Not vulnerable
This package is not known to fix any advisories.