Search for packages
| purl | pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M2 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-cx6h-86xw-9x34
Aliases: CVE-2023-28709 |
Apache Tomcat - Fix for CVE-2023-24998 was incomplete The fix for CVE-2023-24998 was incomplete. If non-default HTTP connector settings were … |
Vulnerable |
|
GHSA-hfrx-6qgj-fp6c
Aliases: CVE-2023-24998 |
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts … |
Vulnerable Vulnerable |
|
GHSA-ff77-26x5-69cr
Aliases: CVE-2025-31651 |
Apache Tomcat Rewrite rule bypass Improper Neutralization of Escape, Meta, or Control Sequences vulnerability in Apache Tomcat. For a subset … |
Vulnerable Vulnerable |
|
GHSA-3p2h-wqq4-wf4h
Aliases: CVE-2025-31650 |
Apache Tomcat Denial of Service via invalid HTTP priority header Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling … |
Vulnerable Vulnerable |