pkg:Maven/org.apache.tomcat:tomcat-coyote

All known vulnerabilities

• CRITICAL9.8CVE-2017-5651Expected Behavior Violation in Apache Tomcat
  >= 9.0.0.M1, < 9.0.0.M19
• CRITICAL9.1CVE-2025-66614Apache Tomcat: Client certificate verification bypass due to virtual host mapping
  >= 11.0.0-M1, < 11.0.15
• HIGH8.6Apache Tomcat: Denial of Service
  >= 11.0.0-M1, < 11.0.0-M21
• HIGH7.5Apache Tomcat: Request smuggling via invalid chunk extension
  >= 7.0.0, < 9.0.116
• HIGH7.5Apache Tomcat: TLS cipher order is not preserved
  >= 9.0.114, < 9.0.116
• HIGH7.5Apache Tomcat: h2 DoS - Made You Reset
  >= 11.0.0-M1, < 11.0.10
• HIGH7.5Apache Tomcat: DoS via excessive h2 streams at connection start
  >= 11.0.0-M1, < 11.0.9
• HIGH7.5Apache Tomcat: APR/Native Connector crash leading to DoS
  >= 9.0.0.M1, < 9.0.107
• HIGH7.5Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame
  >= 9.0.76, < 9.0.104
• HIGH7.5Apache Tomcat: HTTP/2 excess header handling DoS
  >= 11.0.0-M1, < 11.0.0-M21
• HIGH7.5Apache Tomcat: HTTP/2 header handling DoS
  >= 11.0.0-M1, < 11.0.0-M17
• HIGH7.5Apache Tomcat: Fix for CVE-2023-24998 is incomplete
  >= 8.5.85, < 8.5.88
• HIGH7.5Apache Tomcat: AJP response header mix-up
  >= 8.5.88, < 8.5.89
• HIGH7.5tomcat9 - security update
  >= 10.1.0-M1, < 10.1.5
• HIGH7.5Apache Tomcat request smuggling via malformed content-length
  >= 9.0.0-M1, < 9.0.68
• HIGH7.5Apache Tomcat: Request header mix-up between HTTP/2 streams
  >= 10.0.0-M1, < 10.0.0-M10
• HIGH7.5tomcat8 - security update
  >= 10.0.0-M1, < 10.0.0-M6
• HIGH7.5Apache Tomcat h2c request mix-up
  >= 10.0.0-M1, < 10.0.2
• HIGH7.5Apache Tomcat Denial of Service vulnerability
  >= 9.0.0, < 9.0.16
• HIGH7.1tomcat8 - security update
  >= 9.0.0.M1, < 9.0.0.M12
• MEDIUM6.5Apache Tomcat: Request/response mix-up with HTTP/2
  >= 9.0.92, < 9.0.96
• MEDIUM5.9Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
  >= 9.0.70, < 9.0.81
• MEDIUM5.3Apache Tomcat: Fix for CVE-2025-66614 is incomplete
  >= 9.0.113, < 9.0.116
• MEDIUM5.3Apache Tomcat: Leaking of unrelated request bodies in default error page
  >= 9.0.0-M11, < 9.0.44
• MEDIUM5.3Apache Tomcat: Trailer header parsing too lenient
  >= 11.0.0-M1, < 11.0.0-M12
• MEDIUM4.3tomcat9 - security update
  >= 10.0.0-M1, < 10.0.0-M8
• LOW3.7Apache Tomcat: Security constraint bypass with HTTP/0.9
  >= 11.0.0-M1, < 11.0.15
• —Denial of service in Apache Tomcat
  >= 8.0.0-RC1, < 8.0.4
• —Integer Overflow or Wraparound in Apache Tomcat
  from 0, < 6.0.40