Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@11.0.12
purl pkg:maven/org.apache.tomcat/tomcat-coyote-ffm@11.0.12
Next non-vulnerable version 11.0.23
Latest non-vulnerable version 11.0.23
Risk score 4.1
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-95jq-rwvf-vjx4
Aliases:
CVE-2026-29145
Apache Tomcat: CLIENT_CERT authentication does not fail as expected CLIENT_CERT authentication does not fail as expected for some scenarios when …
11.0.20
Vulnerable
GHSA-24j9-x2wg-9qv6
Aliases:
CVE-2026-34500
Apache Tomcat: CLIENT_CERT authentication does not fail as expected CLIENT_CERT authentication does not fail as expected for some scenarios when …
11.0.21
Vulnerable
CVE-2026-24734
Aliases:
GHSA-mgp5-rv84-w37q
Apache Tomcat Coyote FFM OCSP verification bypass Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an …
9.0.115
Vulnerable
10.1.52
Vulnerable
11.0.18
Vulnerable
CVE-2026-53434
Aliases:
GHSA-4x29-79gh-6v8q
Apache Tomcat - Invalid CRL configuration doesn't trigger failure for FFM Connector Detection of Error Condition Without Action vulnerability in …
9.0.119
Not vulnerable
10.1.56
Not vulnerable
11.0.23
Not vulnerable
This package is not known to fix any advisories.