Search for packages
| purl | pkg:maven/org.apache.tomcat/tomcat-util@9.0.0.M20 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-g8pj-r55q-5c2v
Aliases: CVE-2023-42795 |
Apache Tomcat Incomplete Cleanup vulnerability Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from … |
Vulnerable |
|
CVE-2019-10072
|
Uncontrolled Resource Consumption The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in … |
Vulnerable Vulnerable |
|
CVE-2018-8037
|
Information Exposure A bug in the tracking of connection closures can lead to reuse of user sessions in a new … |
Vulnerable Vulnerable |
|
CVE-2019-0221
|
Cross-site Scripting The SSI `printenv` command in Apache Tomcat echoes user provided data without escaping and is, therefore, vulnerable to … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2018-1336
|
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the … |
Vulnerable Vulnerable Vulnerable Not vulnerable |
|
CVE-2019-0199
|
Uncontrolled Resource Consumption The HTTP/2 implementation in Apache Tomcat accepted streams with excessive numbers of `SETTINGS` frames and also permitted … |
Vulnerable Vulnerable |