An open API service providing security vulnerability metadata for many open source software ecosystems.

maven

org.apache.tomcat:tomcat-coyote

maven

Tomcat Connectors and HTTP parser

View on repo1.maven.org

Security Advisories for org.apache.tomcat:tomcat-coyote in maven

Critical
2 months ago

Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation GSA_kwCzR0hTQS1mNTI1LTQ0eHYtZjJxas4ABleU

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Critical
6 months ago

Apache Tomcat - HTTP/2 request headers not validated GSA_kwCzR0hTQS1yMjljLTY4Z2gteHA2eM4ABWtT

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
Moderate
7 months ago

Apache Tomcat has an Improper Input Validation vulnerability GSA_kwCzR0hTQS04bWM1LTUzbTUtM3FqMs4ABVCH

maven org.apache.tomcat:tomcat, org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
7 months ago

Apache Tomcat has an HTTP Request/Response Smuggling vulnerability GSA_kwCzR0hTQS01NjN4LXE1cnEtNTdxcM4ABVBl

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
7 months ago

Apache Tomcat: Configured cipher preference order not preserved GSA_kwCzR0hTQS02OWNjLWN2NzgtcWM4Z84ABVBu

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat
Moderate
8 months ago

Apache Tomcat - Client certificate verification bypass GSA_kwCzR0hTQS1mcGo4LWdxNHYtcDM1NM4ABSbo

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat, org.apache.tomcat.embed:tomcat-embed-core
High
8 months ago

Apache Tomcat has an Improper Input Validation vulnerability GSA_kwCzR0hTQS1tZ3A1LXJ2ODQtdzM3cc4ABSb8

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
about 1 year ago

Apache Tomcat Improper Resource Shutdown or Release vulnerability GSA_kwCzR0hTQS1ncXAzLTJjdnIteDhtM84ABLBb

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 1 year ago

Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector GSA_kwCzR0hTQS00ajNjLTQyeHYtM2Y4NM4ABKBo

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 1 year ago

Apache Tomcat Denial of Service via invalid HTTP priority header GSA_kwCzR0hTQS0zcDJoLXdxcTQtd2Y0aM4ABHO5

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
almost 2 years ago

Apache Tomcat Request and/or response mix-up GSA_kwCzR0hTQS1xdmY1LWh2angtd20yN84ABBdF

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
almost 2 years ago

Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability GSA_kwCzR0hTQS03anFmLXYzNTgtcDhnN84ABBC1

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 2 years ago

Apache Tomcat - Denial of Service GSA_kwCzR0hTQS13bTl3LXJqajMtajM1Ns4AA9gV

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 2 years ago

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests GSA_kwCzR0hTQS03dzc1LTMyY2ctcjZnMs4AA5-Y

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
almost 3 years ago

Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information GSA_kwCzR0hTQS1mNHFmLW01Z2YtOGptOM4AA4kQ

maven org.apache.tomcat.experimental:tomcat-embed-programmatic, org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
about 3 years ago

Apache Tomcat Improper Input Validation vulnerability GSA_kwCzR0hTQS1yNmozLXB4NWctY3EzeM4AA2X8

maven org.apache.tomcat:tomcat-coyote
Moderate
about 3 years ago

HTTP/2 Stream Cancellation Attack GSA_kwCzR0hTQS1xcHBqLWZtNXItaHhyM84AA2X2

maven, swift, go org.apache.tomcat:tomcat-coyote, com.typesafe.akka:akka-http-core_2.11, com.typesafe.akka:akka-http-core_2.12, com.typesafe.akka:akka-http-core_2.13, com.typesafe.akka:akka-http-core, org.eclipse.jetty.http2:jetty-http2-server, org.eclipse.jetty.http2:jetty-http2-common, org.eclipse.jetty.http2:http2-server, org.eclipse.jetty.http2:http2-common, github.com/apple/swift-nio-http2, org.apache.tomcat.embed:tomcat-embed-core, golang.org/x/net
Moderate
about 3 years ago

Apache Tomcat Incomplete Cleanup vulnerability GSA_kwCzR0hTQS1qbTdtLThqaDYtMjlocM4AA2Wo

maven org.apache.tomcat:tomcat-coyote
High
over 3 years ago

Apache Tomcat - Fix for CVE-2023-24998 was incomplete GSA_kwCzR0hTQS1jeDZoLTg2eHctOXgzNM4AA0cs

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
over 3 years ago

Apache Tomcat vulnerable to information leak GSA_kwCzR0hTQS1tcHB2LTc5Y2gtdnc2cc4AAz98

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
High
almost 4 years ago

Apache Tomcat may reject request containing invalid Content-Length header GSA_kwCzR0hTQS1wMjJ4LWc5cHgtMzk0Nc4AAvm5

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core
Moderate
over 4 years ago

Denial of service in Apache Tomcat GSA_kwCzR0hTQS13ZjV2LWpoeGotcTYzMs4AAYNe

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
Moderate
over 4 years ago

Integer Overflow or Wraparound in Apache Tomcat GSA_kwCzR0hTQS00NzVmLTc0d3AtcHF2Nc4AATn-

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat:tomcat
Critical
over 4 years ago

Expected Behavior Violation in Apache Tomcat GSA_kwCzR0hTQS05aGcyLTM5NWotODNybc4AASV-

maven org.apache.tomcat.embed:tomcat-embed-core, org.apache.tomcat:tomcat-coyote
High
over 4 years ago

Improper Input Validation in Apache Tomcat GSA_kwCzR0hTQS1qYzdwLTVyMzktOTQ3N833JQ

maven org.apache.tomcat:tomcat-coyote
High
over 5 years ago

Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLWozOWMtYzhoai14NGoz

maven org.apache.tomcat:tomcat-coyote, org.apache.tomcat.embed:tomcat-embed-core

Match affected ranges for this package. Potential advisories inferred from related packages are excluded.

Filter by Severity