Browse Security Advisories
High Security Advisories for https://github.com/apache/tomcat Clear Filters
High
10 months ago
Apache Tomcat Vulnerable to Relative Path Traversal
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat
High
about 1 year ago
Apache Tomcat Improper Resource Shutdown or Release vulnerability
maven
org.apache.tomcat:tomcat-coyote
High
about 1 year ago
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
maven
org.apache.tomcat:tomcat-coyote
High
about 1 year ago
Apache Tomcat Catalina is vulnerable to DoS attack through bypassing of size limits
maven
org.apache.tomcat:tomcat-catalina
High
about 1 year ago
Apache Tomcat - DoS in multipart upload
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 1 year ago
Apache Tomcat Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
maven
org.apache.tomcat:tomcat-catalina
High
almost 2 years ago
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
about 2 years ago
Apache Tomcat - Denial of Service
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 2 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat-catalina
High
about 3 years ago
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
about 3 years ago
Apache Tomcat vulnerable to information leak
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 3 years ago
Apache Tomcat improperly escapes input from JsonErrorReportValve
maven
org.apache.tomcat:tomcat-util, org.apache.tomcat:tomcat-catalina, org.apache.tomcat.embed:tomcat-embed-core
High
almost 4 years ago
Apache Tomcat may reject request containing invalid Content-Length header
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat does not enforce the maxHttpHeaderSize limit
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Uncontrolled Resource Consumption in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat
maven
org.apache.tomcat:tomcat-util
High
over 4 years ago
Apache Tomcat allows remote attackers to read data that was intended to be associated with a different request
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Unrestricted Upload of File with Dangerous Type Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Handling of Exceptional Conditions in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Resource Shutdown or Release in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Improper Access Control in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina
High
over 4 years ago
Improper Input Validation in Apache Tomcat
maven
org.apache.tomcat:tomcat-coyote
High
over 4 years ago
Apache Tomcat vulnerable to SecurityManager bypass
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Apache Tomcat EncryptInterceptor error leads to Uncontrolled Resource Consumption
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Uncontrolled Resource Consumption in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat-coyote
High
almost 5 years ago
Missing Release of Resource after Effective Lifetime in Apache Tomcat
maven
org.apache.tomcat:tomcat
High
over 5 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
about 6 years ago
Potential remote code execution in Apache Tomcat
maven
org.apache.tomcat:tomcat-catalina
High
about 7 years ago
Improper Locking in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
over 7 years ago
Commons FileUpload Denial of service vulnerability
maven
org.apache.tomcat:tomcat, commons-fileupload:commons-fileupload
High
almost 8 years ago
The host name verification missing in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
High
almost 8 years ago
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
maven
org.apache.tomcat.embed:tomcat-embed-core
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,068
Erlang Ecosystem Foundation
172
GitHub Advisory Database
34,544
Filter by Ecosystem
npm
2,914
maven
2,684
pypi
2,555
packagist
1,944
go
1,855
nuget
1,481
cargo
558
rubygems
374
cpan
125
hex
104
actions
23
swift
22
pub
6
Filter by Package
Microsoft.ChakraCore
234
openclaw
217
tensorflow
122
tensorflow-cpu
108
tensorflow-gpu
106
magento/community-edition
102
open-webui
73
moodle/moodle
68
org.jenkins-ci.main:jenkins-core
62
flowise
62
wwbn/avideo
56
n8n
53
parse-server
49
com.fasterxml.jackson.core:jackson-databind
45
mlflow
43
Django
43
magento/project-community-edition
42
craftcms/cms
41
apache-airflow
41
org.apache.tomcat:tomcat
40
typo3/cms
39
librenms/librenms
38
pimcore/pimcore
38
dolibarr/dolibarr
38
github.com/rancher/rancher
36
getgrav/grav
33
thorsten/phpmyfaq
32
drupal/core
32
gogs.io/gogs
31
code.gitea.io/gitea
31
salt
31
phpmyadmin/phpmyadmin
28
Plone
28
pillow
28
microweber/microweber
27
typo3/cms-core
27
praisonai
26
org.keycloak:keycloak-services
26
symfony/symfony
26
Magick.NET-Q16-HDRI-AnyCPU
26
@budibase/server
26
org.apache.tomcat.embed:tomcat-embed-core
26
nokogiri
26
next
26
Magick.NET-Q16-AnyCPU
26
com.liferay.portal:release.portal.bom
25
Magick.NET-Q16-HDRI-x86
25
org.apache.struts:struts2-core
25
drupal/drupal
25
ansible
24
github.com/mattermost/mattermost-server
24
github.com/siyuan-note/siyuan/kernel
24
Magick.NET-Q16-HDRI-x64
23
Magick.NET-Q16-HDRI-arm64
23
github.com/zitadel/zitadel
23
opencv-python
23
Magick.NET-Q16-HDRI-OpenMP-arm64
23
Magick.NET-Q8-x86
23
github.com/hashicorp/vault
23
Magick.NET-Q8-AnyCPU
23
github.com/traefik/traefik/v2
23
opencv-contrib-python
22
Magick.NET-Q16-x86
22
Magick.NET-Q16-OpenMP-arm64
22
@anthropic-ai/claude-code
22
com.thoughtworks.xstream:xstream
22
django
21
Magick.NET-Q8-arm64
21
Magick.NET-Q16-OpenMP-x64
21
matrix-synapse
21
github.com/filebrowser/filebrowser/v2
21
Pillow
21
Microsoft.AspNetCore.App.Runtime.win-x64
21
github.com/traefik/traefik/v3
21
froxlor/froxlor
21
com.jfinal:jfinal
21
electron
20
pocketmine/pocketmine-mp
20
Magick.NET-Q8-OpenMP-x64
20
vllm
20
Magick.NET-Q16-arm64
20
mantisbt/mantisbt
20
Magick.NET-Q8-OpenMP-arm64
20
Magick.NET-Q16-x64
20
picklescan
20
DBD-SQLite
20
Microsoft.AspNetCore.App.Runtime.win-x86
20
org.jenkins-ci.plugins:script-security
19
GitPython
19
Microsoft.NetCore.App.Runtime.win-arm64
19
Microsoft.NetCore.App.Runtime.win-arm
19
Microsoft.NetCore.App.Runtime.win-x64
19
io.undertow:undertow-core
19
directus
19
com.liferay.portal:release.dxp.bom
19
gradio
19
Microsoft.NetCore.App.Runtime.win-x86
19
axios
18
Microsoft.AspNetCore.App.Runtime.win-arm
18
keystone
18
Microsoft.AspNetCore.App.Runtime.linux-x64
18
pyload-ng
18
rdiffweb
18
Magick.NET-Q8-x64
18
rack
18
deno
18
org.xwiki.platform:xwiki-platform-oldcore
17
Microsoft.AspNetCore.App.Runtime.win-arm64
17
shopware/platform
17
Magick.NET-Q16-HDRI-OpenMP-x64
17
github.com/grafana/grafana
17
Microsoft.AspNetCore.App.Runtime.osx-x64
17
phpoffice/phpspreadsheet
17
litellm
17
getkirby/cms
17
mautic/core
17
PraisonAI
16
yeswiki/yeswiki
16
Microsoft.AspNetCore.App.Runtime.linux-musl-x64
16
concrete5/concrete5
16
Microsoft.NetCore.App.Runtime.linux-arm
16
openbabel
16
Microsoft.AspNetCore.App.Runtime.linux-arm64
16
shopware/core
16
Microsoft.NetCore.App.Runtime.linux-arm64
16
github.com/usememos/memos
16
Microsoft.AspNetCore.App.Runtime.linux-musl-arm64
16
surrealdb
16
nltk
16
org.apache.solr:solr-core
16
openssl-src
16
Microsoft.AspNetCore.App.Runtime.linux-arm
16
baserproject/basercms
15
Microsoft.NetCore.App.Runtime.linux-musl-arm
15
statamic/cms
15
Microsoft.NetCore.App.Runtime.linux-x64
15
github.com/nats-io/nats-server/v2
15
Microsoft.NetCore.App.Runtime.linux-musl-x64
15
nilsteampassnet/teampass
15
apache-superset
15
praisonaiagents
15
github.com/kyverno/kyverno
15
Microsoft.NetCore.App.Runtime.linux-musl-arm64
15
github.com/hashicorp/consul
15
github.com/mattermost/mattermost/server/v8
15
Microsoft.NetCore.App.Runtime.osx-arm64
14
vyper
14
org.apache.tomcat:tomcat-catalina
14
org.apache.openmeetings:openmeetings-parent
14
mindsdb
14
devcode-it/openstamanager
14
net.mingsoft:ms-mcms
14
snipe/snipe-it
14
centreon/centreon
14
phpmyfaq/phpmyfaq
14
langflow
14
pnpm
14
tar
14
org.keycloak:keycloak-core
14
cockpit-hq/cockpit
13
github.com/gotenberg/gotenberg/v8
13
github.com/coder/coder/v2
13
better-auth
13
pgadmin4
13
rubygems-update
13
golang.org/x/net
13
github.com/hashicorp/nomad
13
Microsoft.NetCore.App.Runtime.osx-x64
13
activerecord
12
composer/composer
12
github.com/argoproj/argo-cd/v2
12
github.com/ethereum/go-ethereum
12
cryptography
12
openmage/magento-lts
12
silverstripe/framework
12
github.com/argoproj/argo-cd
12
Microsoft.AspNetCore.App.Runtime.linux-musl-arm
12
Microsoft.AspNetCore.App.Runtime.osx-arm64
12
praisonai-platform
12
flowise-components
11
org.keycloak:keycloak-parent
11
org.apache.tomcat:tomcat-coyote
11
github.com/traefik/traefik
11
datamodel-code-generator
11
org.springframework.security:spring-security-core
11
react-router
11
keras
11
laravel/framework
11
actionpack
11
intelliants/subrion
11
github.com/zitadel/zitadel/v2
11
github.com/ollama/ollama
11
Glances
10
funadmin/funadmin
10
Microsoft.WindowsDesktop.App.Runtime.win-x86
10
fickling
10
k8s.io/ingress-nginx
10
github.com/coredns/coredns
10
nova
10
admidio/admidio
10
Filter by Repository
https://github.com/chakra-core/ChakraCore
204
https://github.com/tensorflow/tensorflow
122
https://github.com/xwiki/xwiki-platform
64
https://github.com/django/django
52
https://github.com/FasterXML/jackson-databind
44
https://github.com/jenkinsci/jenkins
43
https://github.com/apache/tomcat
42
https://github.com/apache/airflow
39
https://github.com/python-pillow/Pillow
35
https://github.com/moodle/moodle
34
https://github.com/keycloak/keycloak
32
https://github.com/librenms/librenms
28
https://github.com/pimcore/pimcore
28
https://github.com/dotnet/runtime
28
https://github.com/rancher/rancher
27
https://github.com/opencv/opencv
25
https://github.com/microweber/microweber
25
https://github.com/symfony/symfony
23
https://github.com/x-stream/xstream
22
https://github.com/Dolibarr/dolibarr
21
https://github.com/apache/struts
20
https://github.com/sparklemotion/nokogiri
20
https://github.com/ansible/ansible
19
https://github.com/spring-projects/spring-framework
19
https://github.com/zitadel/zitadel
18
https://github.com/thorsten/phpmyfaq
18
https://github.com/pmmp/PocketMine-MP
18
https://github.com/TYPO3/typo3
18
https://github.com/parse-community/parse-server
17
https://github.com/ikus060/rdiffweb
17
https://github.com/plone/Products.CMFPlone
16
https://github.com/mlflow/mlflow
16
https://github.com/gradio-app/gradio
16
https://github.com/github/advisory-database
15
https://github.com/kubernetes/kubernetes
15
https://github.com/erlang/otp
15
https://github.com/rails/rails
15
https://github.com/apache/inlong
15
https://github.com/getgrav/grav
15
https://github.com/grafana/grafana
14
https://github.com/argoproj/argo-cd
14
https://github.com/vyperlang/vyper
14
https://github.com/openstack/keystone
14
https://github.com/usememos/memos
14
https://github.com/jenkinsci/script-security-plugin
14
https://github.com/liferay/liferay-portal
13
https://github.com/matrix-org/synapse
13
https://github.com/mindsdb/mindsdb
13
https://github.com/mautic/mautic
13
https://github.com/undertow-io/undertow
13
https://github.com/saltstack/salt
13
https://github.com/PHPOffice/PhpSpreadsheet
12
https://github.com/electron/electron
12
https://github.com/denoland/deno
12
https://github.com/directus/directus
12
https://github.com/hashicorp/consul
12
https://github.com/hashicorp/vault
11
https://github.com/dotnet/aspnetcore
11
https://github.com/strapi/strapi
11
https://github.com/silverstripe/silverstripe-framework
11
https://github.com/run-llama/llama_index
11
https://github.com/apache/nifi
11
https://github.com/FlowiseAI/Flowise
10
https://github.com/octobercms/october
10
https://github.com/golang/go
10
https://github.com/funadmin/funadmin
10
https://github.com/go-gitea/gitea
10
https://github.com/rack/rack
10
https://github.com/OpenMage/magento-lts
10
https://github.com/netty/netty
10
https://github.com/surrealdb/surrealdb
10
https://github.com/centreon/centreon
10
https://github.com/opencontainers/runc
9
https://github.com/rusqlite/rusqlite
9
https://github.com/snipe/snipe-it
9
https://github.com/nervosnetwork/ckb
9
https://github.com/laravel/framework
9
https://github.com/apache/cxf
9
https://github.com/h2oai/h2o-3
9
https://github.com/vercel/next.js
9
https://github.com/anthropics/claude-code
9
https://github.com/spring-projects/spring-security
9
https://github.com/cui2shark/cms
9
https://github.com/openstack/nova
9
https://github.com/nilsteampassnet/teampass
9
https://github.com/apache/camel
9
https://github.com/cloudfoundry/uaa
9
https://github.com/pyload/pyload
9
https://github.com/traefik/traefik
9
https://github.com/apollographql/router
9
https://github.com/geoserver/geoserver
9
https://github.com/nats-io/nats-server
8
https://github.com/backstage/backstage
8
https://github.com/PaddlePaddle/Paddle
8
https://github.com/OPCFoundation/UA-.NETStandard
8
https://github.com/phpmyadmin/phpmyadmin
8
https://github.com/OpenRefine/OpenRefine
8
https://github.com/apache/kylin
8
https://github.com/TYPO3/TYPO3.CMS
8
https://github.com/craftcms/cms
8
https://github.com/vllm-project/vllm
8
https://github.com/sqlite/sqlite
8
https://github.com/dnnsoftware/Dnn.Platform
8
https://github.com/open-webui/open-webui
8
https://github.com/gogs/gogs
8
https://github.com/bcgit/bc-java
8
https://github.com/cockpit-hq/cockpit
8
https://github.com/pyca/cryptography
8
https://github.com/shopware/platform
8
https://github.com/mantisbt/mantisbt
7
https://github.com/composer/composer
7
https://github.com/filebrowser/filebrowser
7
https://github.com/smarty-php/smarty
7
https://github.com/ash-project/ash
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/eclipse/jetty.project
7
https://github.com/mattermost/mattermost
7
https://github.com/magento/magento2
7
https://github.com/rubygems/rubygems
7
https://github.com/cobbler/cobbler
7
https://github.com/YesWiki/yeswiki
7
https://github.com/faucetsdn/ryu
7
https://github.com/PHPMailer/PHPMailer
7
https://github.com/shopware/shopware
7
https://github.com/apache/activemq
7
https://github.com/contao/contao
7
https://github.com/DSpace/DSpace
7
https://github.com/parisneo/lollms
7
https://github.com/xuxueli/xxl-job
7
https://github.com/nilsteampassnet/TeamPass
6
https://github.com/getsentry/sentry
6
https://github.com/sequelize/sequelize
6
https://github.com/langchain-ai/langchain
6
https://github.com/cilium/cilium
6
https://github.com/WWBN/AVideo
6
https://github.com/madler/zlib
6
https://github.com/gravitl/netmaker
6
https://github.com/OpenNMS/opennms
6
https://github.com/pgadmin-org/pgadmin4
6
https://github.com/containers/podman
6
https://github.com/aubio/aubio
6
https://github.com/haxtheweb/issues
6
https://github.com/ImageMagick/ImageMagick
6
https://github.com/cosmos/cosmos-sdk
6
https://github.com/quarkusio/quarkus
6
https://github.com/protocolbuffers/protobuf
6
https://github.com/drupal/core
6
https://github.com/TYPO3-CMS/core
6
https://github.com/intelliants/subrion
6
https://github.com/getkirby/kirby
6
https://github.com/mmaitre314/picklescan
6
https://github.com/Perl/perl5
6
https://github.com/bodil/sized-chunks
6
https://github.com/matrix-org/matrix-js-sdk
6
https://github.com/dromara/hutool
6
https://github.com/froxlor/froxlor
6
https://github.com/hyperledger/fabric
6
https://github.com/CVEProject/cvelist
6
https://github.com/goharbor/harbor
6
https://github.com/RaspAP/raspap-webgui
6
https://github.com/cefsharp/CefSharp
6
https://github.com/Graylog2/graylog2-server
6
https://github.com/kyverno/kyverno
6
https://github.com/opencast/opencast
6
https://github.com/DrunkenShells/Disclosures
6
https://github.com/nautobot/nautobot
6
https://github.com/npm/node-tar
6
https://github.com/guzzle/guzzle
6
https://github.com/ethyca/fides
6
https://github.com/minio/minio
6
https://github.com/istio/istio
6
https://github.com/kiwitcms/Kiwi
6
https://github.com/OpenZeppelin/openzeppelin-contracts
6
https://github.com/BlackFan/client-side-prototype-pollution
5
https://github.com/benoitc/hackney
5
https://github.com/statamic/cms
5
https://github.com/n8n-io/n8n
5
https://github.com/axios/axios
5
https://sourceforge.net/projects/phpmyadmin.sourceforge.net
5
https://github.com/hashicorp/go-getter
5
https://github.com/docker/docker
5
https://github.com/bolt/bolt
5
https://github.com/vantage6/vantage6
5
https://github.com/pear/Archive_Tar
5
https://github.com/cometbft/cometbft
5
https://github.com/beego/beego
5
https://github.com/yiisoft/yii2
5
https://github.com/cloudflare/cfrpki
5
https://github.com/thorsten/phpMyFAQ
5
https://github.com/openstack/neutron
5
https://github.com/faisalman/ua-parser-js
5
https://github.com/cri-o/cri-o
5
https://github.com/forkcms/forkcms
5
https://github.com/zendframework/zendframework
5
https://github.com/PrestaShop/PrestaShop
5
https://github.com/apache/xmlgraphics-batik
5
https://github.com/cakephp/cakephp
5
https://github.com/mtrudel/bandit
5
https://github.com/apache/dolphinscheduler
5