Search for packages
| purl | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.0.12 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-p22x-g9px-3945
Aliases: CVE-2022-42252 |
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to … |
Vulnerable |
|
GHSA-qppj-fm5r-hxr3
Aliases: CVE-2023-44487 |
HTTP/2 Stream Cancellation Attack ## HTTP/2 Rapid reset attack The HTTP/2 protocol allows clients to indicate to the server that … |
Vulnerable |
|
CVE-2022-42252
Aliases: GHSA-p22x-g9px-3945 |
Improper Input Validation If Apache Tomcat 8.5.0 to 8.5.52, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to 10.0.26 or 10.1.0-M1 to 10.1.0 was … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-29885
|
Uncontrolled Resource Consumption The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-34305
Aliases: GHSA-6j88-6whg-x687 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-42340
|
Missing Release of Resource after Effective Lifetime tomcat is vulnerable to a memory leak that, over time, could lead to … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2021-43980
|
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … | There are no reported fixed by versions. |
|
GHSA-xjgh-84hx-56c5
Aliases: CVE-2017-12617 |
Unrestricted Upload of File with Dangerous Type Apache Tomcat When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, … |
Vulnerable |