Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.86
purl pkg:maven/org.apache.tomcat/tomcat-tribes@9.0.86
Next non-vulnerable version 9.0.117
Latest non-vulnerable version 11.0.21
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2026-24880
Aliases:
GHSA-563x-q5rq-57qp
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat …
11.0.20
Vulnerable
9.0.116
Vulnerable
10.1.52
Vulnerable
11.0.20
Vulnerable
9.0.116
Vulnerable
10.1.52
Vulnerable
GHSA-x4m4-345f-5h5g
Aliases:
CVE-2026-34487
Apache Tomcat vulnerable to Insertion of Sensitive Information into Log File Insertion of Sensitive Information into Log File vulnerability in …
9.0.117
Not vulnerable
9.0.117
Not vulnerable
GHSA-h468-7pvh-8vr8
Aliases:
CVE-2026-29146
Apache Tomcat: Padding Oracle vulnerability in EncryptInterceptor Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration. This issue affects …
9.0.116
Vulnerable
11.0.20
Vulnerable
9.0.116
Vulnerable
This package is not known to fix any advisories.