Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.1
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-13934

Denial of Service h2c does not release the `HTTP/1.1` processor after the upgrade to `HTTP/2.` If a sufficient number of …
9.0.37
Vulnerable
8.5.57
Vulnerable
CVE-2020-17527

Information Exposure While investigating bug it was discovered that Apache Tomcat to to to could re-use an HTTP request header …
9.0.40
Vulnerable
10.0.2
Vulnerable
8.5.60
Vulnerable
This package is not known to fix any advisories.