Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.25
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.25
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2026-66422

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in …
9.0.121
Vulnerable
11.0.25
Vulnerable
This package is not known to fix any advisories.