Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.0-M1
Tags Ghost
Next non-vulnerable version 9.0.122
Latest non-vulnerable version 11.0.26
Risk score 4.1
Vulnerabilities affecting this package (8)
Advisory Summary Fixed in package version
GHSA-p22x-g9px-3945
Aliases:
CVE-2022-42252
Apache Tomcat may reject request containing invalid Content-Length header If Apache Tomcat 8.5.0 to 8.5.82, 9.0.0-M1 to 9.0.67, 10.0.0-M1 to …
9.0.68
Vulnerable
GHSA-vvw4-rfwf-p6hx
Aliases:
CVE-2020-17527
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat While investigating bug 64830 it was discovered that Apache …
9.0.40
Vulnerable
GHSA-wm9w-rjj3-j356
Aliases:
CVE-2024-34750
Apache Tomcat - Denial of Service Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing …
9.0.90
Vulnerable
GHSA-r6j3-px5g-cq3x
Aliases:
CVE-2023-45648
Apache Tomcat Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat. Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 …
9.0.81
Vulnerable
GHSA-hfrx-6qgj-fp6c
Aliases:
CVE-2023-24998
Apache Commons FileUpload denial of service vulnerability Apache Commons FileUpload before 1.5 does not limit the number of request parts …
9.0.71
Vulnerable
9.0.71
Vulnerable
GHSA-fpj8-gq4v-p354
Aliases:
CVE-2025-66614
Apache Tomcat - Client certificate verification bypass Improper Input Validation vulnerability. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.14, …
9.0.113
Vulnerable
GHSA-f268-65qc-98vg
Aliases:
CVE-2020-13943
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 …
9.0.38
Vulnerable
GHSA-7w75-32cg-r6g2
Aliases:
CVE-2024-24549
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests Denial of Service due to improper …
9.0.86
Vulnerable
This package is not known to fix any advisories.