Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.0.0-M1
Next non-vulnerable version 10.1.60
Latest non-vulnerable version 11.0.26
Risk score 3.4
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
GHSA-p22x-g9px-3945
Aliases:
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to …
10.0.27
Vulnerable
GHSA-vvw4-rfwf-p6hx
Aliases:
CVE-2020-17527
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat While investigating bug 64830 it was discovered that Apache …
10.0.0-M10
Vulnerable
CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …
10.0.0-M10
Vulnerable
9.0.40
Vulnerable
8.5.60
Vulnerable
7.0.107
Vulnerable
CVE-2020-13934
Aliases:
GHSA-vf77-8h7g-gghp
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat An h2c direct connection to Apache …
8.5.56
Vulnerable
9.0.36
Vulnerable
10.0.0-M6
Vulnerable
8.5.56
Vulnerable
9.0.36
Vulnerable
10.0.0-M6
Vulnerable
GHSA-j39c-c8hj-x4j3
Aliases:
CVE-2021-25122
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat When responding to new h2c connection requests, Apache Tomcat …
10.0.2
Vulnerable
10.0.2
Vulnerable
GHSA-f268-65qc-98vg
Aliases:
CVE-2020-13943
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 …
10.0.0-M8
Vulnerable
10.0.0-M8
Vulnerable
GHSA-vf77-8h7g-gghp
Aliases:
CVE-2020-13934
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat An h2c direct connection to Apache …
10.0.0-M6
Vulnerable
10.0.0-M6
Vulnerable
This package is not known to fix any advisories.