Browse Security Advisories
Moderate Security Advisories for https://github.com/apache/tomcat from github Clear Filters
Moderate
about 1 year ago
Apache Tomcat Session Fixation vulnerability
maven
org.apache.tomcat:tomcat-catalina
Moderate
about 1 year ago
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
about 1 year ago
Apache Tomcat - Security constraint bypass for pre/post-resources
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-catalina
Moderate
about 1 year ago
Apache Tomcat installer for Windows has an untrusted search path vulnerability
maven
org.apache.tomcat:tomcat-catalina, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 1 year ago
Apache Tomcat Denial of Service via invalid HTTP priority header
maven
org.apache.tomcat:tomcat-coyote
Moderate
over 1 year ago
Apache Tomcat Uncontrolled Resource Consumption vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 1 year ago
Apache Tomcat - XSS in generated JSPs
maven
org.apache.tomcat:tomcat-jasper
Moderate
over 1 year ago
Apache Tomcat Request and/or response mix-up
maven
org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 2 years ago
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 2 years ago
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-websocket, org.apache.tomcat:tomcat-websocket
Moderate
over 2 years ago
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
almost 3 years ago
Apache Tomcat Improper Input Validation vulnerability
maven
org.apache.tomcat:tomcat
Moderate
almost 3 years ago
Apache Tomcat Incomplete Cleanup vulnerability
maven
org.apache.tomcat:tomcat
Moderate
almost 3 years ago
Apache Tomcat Open Redirect vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 3 years ago
Apache Tomcat vulnerable to Unprotected Transport of Credentials
maven
org.apache.tomcat:tomcat-catalina
Moderate
over 4 years ago
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Allows Replacing of XML Parser
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat does not follow ServletSecurity annotations
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Denial of service in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 4 years ago
Apache Tomcat allows remote attackers to bypass intended access restrictions
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Verification of Source of a Communication Channel in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Insertion of Sensitive Information into Log File in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat is vulnerable to HTTP request-smuggling
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Denial of Service vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Integer Overflow or Wraparound in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Insufficient Verification of Data Authenticity in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
System Property Disclosure in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Directory Traversal vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Directory Traversal vulnerability
maven
org.apache.tomcat:tomcat
Moderate
over 4 years ago
Apache Tomcat Cross-site scripting (XSS) vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
over 4 years ago
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
maven
org.apache.tomcat:tomcat-coyote
Moderate
over 5 years ago
Information Disclosure in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 7 years ago
Cross-site scripting in Apache Tomcat
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 8 years ago
Apache Tomcat Race Condition vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 8 years ago
Apache Tomcat information exposure vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 8 years ago
Apache Tomcat unauthorized access vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 8 years ago
Apache Tomcat Open Redirect vulnerability
maven
org.apache.tomcat.embed:tomcat-embed-core
Filter by Severity
Filter by Source
CPAN Security Advisory Database
1,054
Erlang Ecosystem Foundation
171
GitHub Advisory Database
34,444
Filter by Ecosystem
maven
3,726
packagist
3,701
pypi
2,753
npm
2,572
go
2,273
nuget
2,181
cargo
605
rubygems
495
hex
38
swift
22
actions
16
pub
3
Filter by Package
moodle/moodle
318
openclaw
300
tensorflow
200
magento/community-edition
193
tensorflow-cpu
192
tensorflow-gpu
187
org.jenkins-ci.main:jenkins-core
158
github.com/mattermost/mattermost/server/v8
129
typo3/cms
116
github.com/mattermost/mattermost-server
115
com.liferay.portal:release.portal.bom
113
org.apache.tomcat:tomcat
100
Magick.NET-Q16-AnyCPU
97
Magick.NET-Q16-HDRI-AnyCPU
96
Magick.NET-Q16-HDRI-x86
94
Magick.NET-Q16-HDRI-OpenMP-arm64
93
Magick.NET-Q16-HDRI-x64
91
pimcore/pimcore
91
Magick.NET-Q16-x86
90
Magick.NET-Q16-OpenMP-arm64
90
Magick.NET-Q16-OpenMP-x64
89
Magick.NET-Q8-AnyCPU
88
Magick.NET-Q16-arm64
88
Magick.NET-Q16-HDRI-arm64
88
Magick.NET-Q8-x86
84
Magick.NET-Q16-x64
83
com.liferay.portal:release.dxp.bom
82
Magick.NET-Q8-arm64
82
Magick.NET-Q8-OpenMP-arm64
82
Magick.NET-Q8-OpenMP-x64
80
typo3/cms-core
80
Magick.NET-Q8-x64
78
wwbn/avideo
73
microweber/microweber
72
apache-airflow
70
silverstripe/framework
67
craftcms/cms
65
thorsten/phpmyfaq
65
concrete5/concrete5
65
open-webui
64
n8n
62
magento/project-community-edition
59
drupal/core
57
dolibarr/dolibarr
56
phpmyadmin/phpmyadmin
56
Magick.NET-Q16-HDRI-OpenMP-x64
55
librenms/librenms
54
github.com/usememos/memos
54
org.keycloak:keycloak-services
51
mantisbt/mantisbt
49
apache-superset
47
symfony/symfony
45
Django
44
code.gitea.io/gitea
44
Magick.NET-Q16-OpenMP-x86
43
actionpack
42
nocodb
41
parse-server
40
snipe/snipe-it
39
drupal/drupal
37
hono
36
github.com/grafana/grafana
36
showdoc/showdoc
35
org.elasticsearch:elasticsearch
35
pypdf
34
directus
34
shopware/platform
34
admidio/admidio
33
picklescan
33
surrealdb
33
org.keycloak:keycloak-core
32
github.com/mattermost/mattermost-server/v6
30
nova
30
shopware/core
30
electron
30
getgrav/grav
30
vllm
29
baserproject/basercms
29
plone
29
mautic/core
29
ghost
29
getkirby/cms
28
intelliants/subrion
28
next
28
ansible
27
moin
27
rack
26
gogs.io/gogs
26
aiohttp
26
github.com/traefik/traefik/v3
25
k8s.io/kubernetes
25
froxlor/froxlor
24
flowise
24
statamic/cms
24
axios
23
github.com/traefik/traefik/v2
23
phpmyfaq/phpmyfaq
23
Plone
23
github.com/cilium/cilium
23
github.com/hashicorp/vault
22
grumpydictator/firefly-iii
22
django
22
github.com/answerdev/answer
21
DotNetNuke.Core
21
matrix-synapse
21
gradio
21
code.vikunja.io/api
21
nilsteampassnet/teampass
21
github.com/openfga/openfga
21
wasmtime
21
kimai/kimai
20
pyload-ng
20
mediawiki/core
20
org.apache.tomcat.embed:tomcat-embed-core
19
dompurify
19
org.apache.struts:struts2-core
19
github.com/fleetdm/fleet/v4
19
shopware/shopware
19
remdex/livehelperchat
18
contao/core-bundle
18
github.com/docker/docker
18
github.com/argoproj/argo-cd/v2
17
keystone
17
github.com/hashicorp/consul
17
prestashop/prestashop
17
salt
17
org.opencms:opencms-core
17
rdiffweb
16
github.com/hashicorp/nomad
16
io.undertow:undertow-core
16
sylius/sylius
16
nokogiri
16
github.com/siyuan-note/siyuan/kernel
16
zendframework/zendframework1
16
undici
16
weblate
15
glance
15
yetiforce/yetiforce-crm
15
vyper
15
org.xwiki.platform:xwiki-platform-oldcore
15
org.apache.jspwiki:jspwiki-main
15
com.liferay.portal:com.liferay.portal.impl
15
typo3/cms-backend
15
org.springframework.security:spring-security-core
15
io.netty:netty-codec-http
15
github.com/filebrowser/filebrowser/v2
14
github.com/goharbor/harbor
14
wagtail
14
pnpm
14
astro
14
github.com/traefik/traefik
14
tinymce
14
feehi/feehicms
14
activesupport
14
feehi/cms
14
helm.sh/helm/v3
13
github.com/containerd/containerd
13
puppet
13
github.com/zitadel/zitadel
13
transformers
13
org.springframework:spring-webmvc
13
mistune
13
com.jfinal:jfinal
13
deno
13
forkcms/forkcms
13
Umbraco.Cms
13
github.com/ethereum/go-ethereum
13
vite
13
coreutils
13
svelte
13
craftcms/commerce
13
com.thoughtworks.xstream:xstream
13
tribalsystems/zenario
13
org.eclipse.jetty:jetty-server
13
facturascripts/facturascripts
12
mlflow
12
OctoPrint
12
mermaid
12
roundup
12
github.com/rancher/rancher
12
lavalite/cms
12
simplesamlphp/simplesamlphp
12
org.bouncycastle:bcprov-jdk14
12
@openzeppelin/contracts-upgradeable
12
phpoffice/phpspreadsheet
12
laravel/framework
12
github.com/apache/incubator-answer
12
github.com/openbao/openbao
12
github.com/argoproj/argo-cd
12
@openzeppelin/contracts
12
wallabag/wallabag
12
ec-cube/ec-cube
12
kubevirt.io/kubevirt
11
ckan
11
org.keycloak:keycloak-parent
11
MessagePack
11
github.com/coder/coder/v2
11
renovate
11
horizon
11
nicegui
11
Filter by Repository
https://github.com/tensorflow/tensorflow
200
https://github.com/moodle/moodle
192
https://github.com/liferay/liferay-portal
143
https://github.com/jenkinsci/jenkins
109
https://github.com/pimcore/pimcore
85
https://github.com/TYPO3/typo3
63
https://github.com/microweber/microweber
63
https://github.com/apache/tomcat
60
https://github.com/xwiki/xwiki-platform
50
https://github.com/usememos/memos
50
https://github.com/silverstripe/silverstripe-framework
50
https://github.com/django/django
50
https://github.com/rails/rails
46
https://github.com/keycloak/keycloak
45
https://github.com/thorsten/phpmyfaq
45
https://github.com/apache/airflow
44
https://github.com/librenms/librenms
42
https://github.com/kubernetes/kubernetes
40
https://github.com/mattermost/mattermost
36
https://github.com/mantisbt/mantisbt
35
https://github.com/star7th/showdoc
32
https://github.com/mmaitre314/picklescan
30
https://github.com/concretecms/concretecms
28
https://github.com/symfony/symfony
27
https://github.com/mautic/mautic
27
https://github.com/grafana/grafana
27
https://github.com/spring-projects/spring-framework
26
https://github.com/ansible/ansible
26
https://github.com/craftcms/cms
26
https://github.com/phpmyadmin/phpmyadmin
26
https://github.com/argoproj/argo-cd
24
https://github.com/shopware/shopware
24
https://github.com/directus/directus
24
https://github.com/umbraco/Umbraco-CMS
23
https://github.com/Dolibarr/dolibarr
22
https://github.com/answerdev/answer
21
https://github.com/plone/Products.CMFPlone
20
https://github.com/apache/activemq
20
https://github.com/magento/magento2
20
https://github.com/firefly-iii/firefly-iii
20
https://github.com/snipe/snipe-it
20
https://github.com/cilium/cilium
19
https://github.com/openstack/nova
18
https://github.com/livehelperchat/livehelperchat
18
https://github.com/contao/contao
18
https://github.com/apache/struts
17
https://github.com/gradio-app/gradio
16
https://github.com/matrix-org/synapse
16
https://github.com/shopware/platform
16
https://github.com/ikus060/rdiffweb
16
https://github.com/CVEProject/cvelist
15
https://github.com/apache/cxf
15
https://github.com/netty/netty
15
https://github.com/getkirby/kirby
15
https://github.com/vyperlang/vyper
15
https://github.com/TYPO3/TYPO3.CMS
14
https://github.com/yetiforcecompany/yetiforcecrm
14
https://github.com/moby/moby
14
https://github.com/geoserver/geoserver
14
https://github.com/tinymce/tinymce
14
https://github.com/x-stream/xstream
14
https://github.com/PaddlePaddle/Paddle
14
https://github.com/OpenNMS/opennms
14
https://github.com/baserproject/basercms
14
https://github.com/saltstack/salt
14
https://github.com/froxlor/froxlor
14
https://github.com/PrestaShop/PrestaShop
13
https://github.com/bcgit/bc-java
13
https://github.com/openfga/openfga
13
https://github.com/rack/rack
13
https://github.com/apache/nifi
13
https://github.com/nilsteampassnet/TeamPass
13
https://github.com/goharbor/harbor
13
https://github.com/go-gitea/gitea
13
https://github.com/strapi/strapi
13
https://github.com/containerd/containerd
13
https://github.com/octobercms/october
13
https://github.com/TYPO3-CMS/core
12
https://github.com/openstack/keystone
12
https://github.com/traefik/traefik
12
https://github.com/helm/helm
12
https://github.com/huggingface/transformers
12
https://github.com/hashicorp/consul
12
https://github.com/OpenZeppelin/openzeppelin-contracts
12
https://github.com/electron/electron
11
https://github.com/vaadin/platform
11
https://github.com/vitejs/vite
11
https://github.com/rancher/rancher
11
https://github.com/ckeditor/ckeditor4
11
https://github.com/surrealdb/surrealdb
11
https://github.com/intelliants/subrion
11
https://github.com/laravel/framework
11
https://github.com/dnnsoftware/Dnn.Platform
11
https://github.com/forkcms/forkcms
11
https://github.com/github/advisory-database
11
https://github.com/apache/zeppelin
11
https://github.com/ethereum/go-ethereum
11
https://github.com/laurent22/joplin
10
https://github.com/simplesamlphp/simplesamlphp
10
https://github.com/TryGhost/Ghost
10
https://github.com/aio-libs/aiohttp
10
https://github.com/backstage/backstage
10
https://github.com/vercel/next.js
10
https://github.com/wallabag/wallabag
10
https://github.com/vllm-project/vllm
10
https://github.com/bytecodealliance/wasmtime
10
https://github.com/liufee/cms
10
https://github.com/decidim/decidim
10
https://github.com/greenpau/caddy-security
10
https://github.com/PHPOffice/PhpSpreadsheet
10
https://github.com/puppetlabs/puppet
9
https://github.com/opencast/opencast
9
https://github.com/urllib3/urllib3
9
https://github.com/OctoPrint/OctoPrint
9
https://github.com/thorsten/phpMyFAQ
9
https://github.com/alkacon/opencms-core
9
https://github.com/jquery/jquery
9
https://github.com/dotnet/runtime
9
https://github.com/pimcore/admin-ui-classic-bundle
9
https://github.com/fatfreecrm/fat_free_crm
9
https://github.com/publify/publify
9
https://github.com/sparklemotion/nokogiri
9
https://github.com/jenkinsci/git-plugin
9
https://github.com/dpgaspar/Flask-AppBuilder
9
https://github.com/sulu/sulu
8
https://github.com/zendframework/zendframework
8
https://github.com/dolibarr/dolibarr
8
https://github.com/apache/superset
8
https://github.com/rubygems/rubygems
8
https://github.com/FlowiseAI/Flowise
8
https://github.com/parse-community/parse-server
8
https://github.com/nilsteampassnet/teampass
8
https://github.com/onionshare/onionshare
8
https://github.com/pandao/editor.md
8
https://github.com/kubeedge/kubeedge
8
https://github.com/gogs/gogs
8
https://github.com/hashicorp/nomad
8
https://github.com/modoboa/modoboa
8
https://github.com/openstack/glance
8
https://github.com/pyload/pyload
8
https://github.com/eclipse/jetty.project
8
https://github.com/rails/rails-html-sanitizer
8
https://github.com/opensearch-project/security
8
https://github.com/openbao/openbao
8
https://github.com/ckan/ckan
8
https://github.com/LavaLite/cms
8
https://github.com/getgrav/grav
8
https://github.com/swagger-api/swagger-ui
8
https://github.com/nocodb/nocodb
7
https://github.com/croogo/croogo
7
https://github.com/louislam/uptime-kuma
7
https://github.com/opencontainers/runc
7
https://github.com/treeverse/lakeFS
7
https://github.com/OPCFoundation/UA-.NETStandard
7
https://github.com/hashicorp/vault
7
https://github.com/matrix-org/matrix-rust-sdk
7
https://github.com/twbs/bootstrap
7
https://github.com/kubevirt/kubevirt
7
https://github.com/jupyter/notebook
7
https://github.com/modxcms/revolution
7
https://github.com/jenkinsci/blueocean-plugin
7
https://github.com/scrapy/scrapy
7
https://github.com/n8n-io/n8n
7
https://github.com/zenml-io/zenml
7
https://github.com/containers/podman
7
https://github.com/zitadel/zitadel
7
https://github.com/python-pillow/Pillow
7
https://github.com/openstack/horizon
7
https://github.com/MobSF/Mobile-Security-Framework-MobSF
7
https://github.com/kevinpapst/kimai2
7
https://github.com/StarCitizenTools/mediawiki-skins-Citizen
7
https://github.com/vaadin/flow
7
https://github.com/py-pdf/pypdf
7
https://github.com/jeecgboot/jeecg-boot
7
https://github.com/bagisto/bagisto
7
https://github.com/undertow-io/undertow
7
https://github.com/dragonflyoss/dragonfly
7
https://github.com/google/fscrypt
7
https://github.com/denoland/deno
7
https://github.com/chakra-core/ChakraCore
7
https://github.com/opencv/opencv
7
https://github.com/Sylius/Sylius
7
https://github.com/vega/vega
7
https://github.com/igniterealtime/Openfire
7
https://github.com/janeczku/calibre-web
7
https://github.com/nahsra/antisamy
7
https://github.com/Leantime/leantime
7
https://github.com/jenkinsci/configuration-as-code-plugin
6
https://github.com/yiisoft/yii2
6
https://github.com/giampaolo/pyftpdlib
6
https://github.com/psf/requests
6
https://github.com/drupal/core
6
https://github.com/tecnickcom/TCPDF
6
https://github.com/1Panel-dev/1Panel
6
https://github.com/pomerium/pomerium
6
https://github.com/sfackler/rust-openssl
6
https://github.com/d4wner/Vulnerabilities-Report
6
https://github.com/NodeBB/NodeBB
6
https://github.com/oroinc/orocommerce
6