Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.54
purl pkg:maven/org.apache.tomcat/tomcat-coyote@10.1.54
Next non-vulnerable version 10.1.60
Latest non-vulnerable version 11.0.26
Risk score 4.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-r29c-68gh-xp6x
Aliases:
CVE-2026-41293
Apache Tomcat - HTTP/2 request headers not validated Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 …
10.1.55
Vulnerable
CVE-2026-68763

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is …
9.0.121
Vulnerable
10.1.59
Vulnerable
11.0.25
Vulnerable
CVE-2026-78437

Incomplete Cleanup Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request …
9.0.122
Not vulnerable
10.1.60
Not vulnerable
11.0.26
Not vulnerable
GHSA-f525-44xv-f2qj
Aliases:
CVE-2026-65637
Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation Improper Input Validation vulnerability in Apache Tomcat due to incomplete …
10.1.59
Vulnerable
This package is not known to fix any advisories.