Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.24
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.24
Next non-vulnerable version 10.1.60
Latest non-vulnerable version 11.0.26
Risk score 10.0
Vulnerabilities affecting this package (12)
Advisory Summary Fixed in package version
GHSA-25xr-qj8w-c4vf
Aliases:
CVE-2025-53506
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams Uncontrolled Resource Consumption vulnerability in Apache Tomcat if …
10.1.43
Vulnerable
GHSA-gqp3-2cvr-x8m3
Aliases:
CVE-2025-48989
Apache Tomcat Improper Resource Shutdown or Release vulnerability Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable …
10.1.44
Vulnerable
GHSA-wm9w-rjj3-j356
Aliases:
CVE-2024-34750
Apache Tomcat - Denial of Service Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing …
10.1.25
Vulnerable
GHSA-mgp5-rv84-w37q
Aliases:
CVE-2026-24734
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using …
10.1.52
Vulnerable
GHSA-qq5r-98hh-rxc9
Aliases:
CVE-2026-24733
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …
10.1.50
Vulnerable
GHSA-7jqf-v358-p8g7
Aliases:
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability Allocation of Resources Without Limits or Throttling vulnerability in Apache …
10.1.25
Vulnerable
CVE-2025-48989
Aliases:
GHSA-gqp3-2cvr-x8m3
Apache Tomcat Improper Resource Shutdown or Release vulnerability Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable …
11.0.10
Vulnerable
10.1.44
Vulnerable
9.0.108
Vulnerable
11.0.10
Vulnerable
10.1.44
Vulnerable
9.0.108
Vulnerable
GHSA-r29c-68gh-xp6x
Aliases:
CVE-2026-41293
Apache Tomcat - HTTP/2 request headers not validated Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 …
10.1.55
Vulnerable
GHSA-fpj8-gq4v-p354
Aliases:
CVE-2025-66614
Apache Tomcat - Client certificate verification bypass Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, …
10.1.50
Vulnerable
10.1.50
Vulnerable
GHSA-3p2h-wqq4-wf4h
Aliases:
CVE-2025-31650
Apache Tomcat Denial of Service via invalid HTTP priority header Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling …
10.1.40
Vulnerable
10.1.40
Vulnerable
GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
10.1.52
Vulnerable
11.0.20
Vulnerable
10.1.52
Vulnerable
CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is …
9.0.121
Vulnerable
10.1.59
Vulnerable
11.0.25
Vulnerable
This package is not known to fix any advisories.