Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-coyote@9.0.116 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r29c-68gh-xp6x
Aliases: CVE-2026-41293 |
Apache Tomcat - HTTP/2 request headers not validated Versions Affected: Apache Tomcat 11.0.0-M1 to 11.0.21 Apache Tomcat 10.1.0-M1 to 10.1.54 … |
Vulnerable |
|
CVE-2026-68763
|
Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2026-78437
|
Incomplete Cleanup Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request … |
Not vulnerable Not vulnerable Not vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-69cc-cv78-qc8g
|
Apache Tomcat: Configured cipher preference order not preserved Configured cipher preference order not preserved vulnerability in Apache Tomcat. This issue … |
CVE-2026-29129
|
|
GHSA-8mc5-53m5-3qj2
|
Apache Tomcat has an Improper Input Validation vulnerability Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix … |
CVE-2026-32990
|
|
GHSA-563x-q5rq-57qp
|
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat … |
CVE-2026-24880
|