Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@11.0.0
Next non-vulnerable version 11.0.26
Latest non-vulnerable version 11.0.26
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2023-41080

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 …
8.5.93
Vulnerable
9.0.80
Vulnerable
10.1.13
Vulnerable
CVE-2023-46589

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from …
8.5.96
Vulnerable
9.0.83
Vulnerable
10.1.16
Vulnerable
CVE-2026-87022

Improper Handling of Length Parameter Inconsistency Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling …
10.1.60
Not vulnerable
9.0.122
Not vulnerable
11.0.26
Not vulnerable
CVE-2026-76183

Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. …
10.1.60
Not vulnerable
9.0.122
Not vulnerable
11.0.26
Not vulnerable
This package is not known to fix any advisories.