org.apache.tomcat:tomcat-util vulnerabilities (Maven)

5 vulnerabilities.

• org.apache.tomcat:tomcat-util Maven Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector CVE-2026-53434 Fix available 9.1 CriticalJune 29, 2026
• org.apache.tomcat:tomcat-util Maven Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests CVE-2023-42795 Fix available 5.3 MediumOctober 10, 2023
• org.apache.tomcat:tomcat-util Maven Apache Tomcat: JsonErrorReportValve escaping CVE-2022-45143 Fix available 7.5 HighJanuary 3, 2023
• org.apache.tomcat:tomcat-util Maven Concurrent Execution using Shared Resource with Improper Synchronization in Apache Tomcat CVE-2016-8745 Fix available EPSS 16.0% 7.5 HighJanuary 8, 2017
• org.apache.tomcat:tomcat-util Maven Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat CVE-2014-0099 Fix available 4.3 MediumMay 31, 2014