Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.92 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-1938
|
Improper Input Validation When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-13935
|
Loop with Unreachable Exit Condition (Infinite Loop) The payload length in a WebSocket frame was not correctly validated in Apache … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2020-1935
|
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) In Apache Tomcat M1 to to to the HTTP header parsing code … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2021-24122
|
Information Exposure When serving resources from a network location using the NTFS file system, Apache Tomcat is susceptible to JSP … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
GHSA-qq5r-98hh-rxc9
Aliases: CVE-2026-24733 |
Apache Tomcat - Security constraint bypass with HTTP/0.9 Improper Input Validation vulnerability in Apache Tomcat. Tomcat did not limit HTTP/0.9 … |
Vulnerable |
|
GHSA-7jqf-v358-p8g7
Aliases: CVE-2024-38286 |
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability Allocation of Resources Without Limits or Throttling vulnerability in Apache … | There are no reported fixed by versions. |
|
GHSA-563x-q5rq-57qp
Aliases: CVE-2026-24880 |
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat … |
Vulnerable Vulnerable Vulnerable |