VulnerableCode Package Details - pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.39

Search for packages

Advisory	Summary	Fixed in package version
GHSA-475f-74wp-pqv5 Aliases: CVE-2014-0075	Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, …	7.0.53 Vulnerable
CVE-2020-1938	Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache …	9.0.31 Vulnerable 8.5.51 Vulnerable 7.0.100 Vulnerable
CVE-2020-13935	Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache …	8.5.57 Vulnerable 7.0.105 Vulnerable 9.0.37 Vulnerable 10.0.2 Vulnerable
CVE-2020-1935	Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code …	9.0.31 Vulnerable 8.5.51 Vulnerable 7.0.100 Vulnerable
CVE-2021-24122	Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …	10.0.0-M10 Vulnerable 9.0.40 Vulnerable 8.5.60 Vulnerable 7.0.107 Vulnerable
GHSA-qq5r-98hh-rxc9 Aliases: CVE-2026-24733	Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …	9.0.113 Vulnerable
CVE-2014-0050	Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …	7.0.52 Vulnerable 8.0.3 Vulnerable 7.0.52 Vulnerable 8.0.3 Vulnerable
GHSA-jc7p-5r39-9477 Aliases: CVE-2016-6816	Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, …	7.0.73 Vulnerable 7.0.73 Vulnerable 7.0.73 Vulnerable
GHSA-563x-q5rq-57qp Aliases: CVE-2026-24880	Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …	9.0.116 Vulnerable 11.0.20 Vulnerable 9.0.116 Vulnerable

Advisory

Summary

Fixed in package version

GHSA-475f-74wp-pqv5
Aliases:
CVE-2014-0075

Integer Overflow or Wraparound in Apache Tomcat Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, …

7.0.53
Vulnerable

CVE-2020-1938

Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache …

9.0.31
Vulnerable

8.5.51
Vulnerable

7.0.100
Vulnerable

CVE-2020-13935

Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache …

8.5.57
Vulnerable

7.0.105
Vulnerable

9.0.37
Vulnerable

10.0.2
Vulnerable

CVE-2020-1935

Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code …

9.0.31
Vulnerable

8.5.51
Vulnerable

7.0.100
Vulnerable

CVE-2021-24122

Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP …

10.0.0-M10
Vulnerable

9.0.40
Vulnerable

8.5.60
Vulnerable

7.0.107
Vulnerable

GHSA-qq5r-98hh-rxc9
Aliases:
CVE-2026-24733

Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 …

9.0.113
Vulnerable

CVE-2014-0050

Denial of service `MultipartStream.java` in this package allows remote attackers to cause a denial of service (infinite loop and CPU …

7.0.52
Vulnerable

8.0.3
Vulnerable

7.0.52
Vulnerable

8.0.3
Vulnerable

GHSA-jc7p-5r39-9477
Aliases:
CVE-2016-6816

Improper Input Validation in Apache Tomcat The code in Apache Tomcat 9.0.0.M1 to 9.0.0.M11, 8.5.0 to 8.5.6, 8.0.0.RC1 to 8.0.38, …

7.0.73
Vulnerable

GHSA-563x-q5rq-57qp
Aliases:
CVE-2026-24880

Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …

9.0.116
Vulnerable

11.0.20
Vulnerable

9.0.116
Vulnerable

Next non-vulnerable version	9.0.122
Latest non-vulnerable version	11.0.26
Risk score	10.0