org.apache.tomcat:tomcat-coyote vulnerabilities (Maven)
34 vulnerabilities.
org.apache.tomcat:tomcat-coyoteMavenApache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incomplete9.8 Criticalorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: HTTP/2 request headers not validated9.8 Criticalorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Fix for CVE-2025-66614 is incomplete5.3 Mediumorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: TLS cipher order is not preserved7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Request smuggling via invalid chunk extension7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat Native, Apache Tomcat: OCSP revocation bypass7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Security constraint bypass with HTTP/0.93.7 Loworg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Client certificate verification bypass due to virtual host mapping9.1 Criticalorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: h2 DoS - Made You Reset7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: DoS via excessive h2 streams at connection start7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: APR/Native Connector crash leading to DoS7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Request/response mix-up with HTTP/26.5 Mediumorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Denial of Service8.6 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: HTTP/2 excess header handling DoS7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: HTTP/2 header handling DoS7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Leaking of unrelated request bodies in default error page5.3 Mediumorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: HTTP request smuggling via malformed trailer headers7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows5.9 Mediumorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Trailer header parsing too lenient5.3 Mediumorg.apache.tomcat:tomcat-coyoteMavenEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: AJP response header mix-up7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Fix for CVE-2023-24998 is incomplete7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat request smuggling via malformed content-length7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat h2c request mix-up7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat: Request header mix-up between HTTP/2 streams7.5 Highorg.apache.tomcat:tomcat-coyoteMavenExposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat4.3 Mediumorg.apache.tomcat:tomcat-coyoteMavenImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache Tomcat7.5 Highorg.apache.tomcat:tomcat-coyoteMavenApache Tomcat Denial of Service vulnerability7.5 Highorg.apache.tomcat:tomcat-coyoteMavenExpected Behavior Violation in Apache Tomcat9.8 Criticalorg.apache.tomcat:tomcat-coyoteMavenImproper Input Validation in Apache Tomcat7.1 Highorg.apache.tomcat:tomcat-coyoteMavenDenial of service in Apache Tomcat5.0 Mediumorg.apache.tomcat:tomcat-coyoteMavenInteger Overflow or Wraparound in Apache Tomcat5.0 Medium