Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.tomcat/tomcat-util@9.0.59
purl pkg:maven/org.apache.tomcat/tomcat-util@9.0.59
Next non-vulnerable version 9.0.121
Latest non-vulnerable version 11.0.25
Risk score 3.4
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-g8pj-r55q-5c2v
Aliases:
CVE-2023-42795
Apache Tomcat Incomplete Cleanup vulnerability Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from …
9.0.81
Vulnerable
CVE-2023-41080

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 …
8.5.93
Vulnerable
9.0.80
Vulnerable
10.1.13
Vulnerable
CVE-2023-46589

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from …
8.5.96
Not vulnerable
9.0.83
Vulnerable
10.1.16
Vulnerable
CVE-2021-43980

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') The simplified implementation of blocking reads and writes introduced in … There are no reported fixed by versions.
GHSA-rq2w-37h9-vg94
Aliases:
CVE-2022-45143
Apache Tomcat improperly escapes input from JsonErrorReportValve The `JsonErrorReportValve` in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 …
9.0.69
Vulnerable
9.0.69
Vulnerable
CVE-2026-65183

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to …
9.0.121
Not vulnerable
10.1.59
Not vulnerable
11.0.25
Not vulnerable
This package is not known to fix any advisories.