tomcat11

Direct Vulnerabilities

Known vulnerabilities in the tomcat11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Authentication Bypass by Primary Weakness	<1:11.0.26-1.amzn2023.0.1
H Insufficient Session Expiration	<1:11.0.26-1.amzn2023.0.1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<1:11.0.26-1.amzn2023.0.1
H Improper Handling of Length Parameter Inconsistency	<1:11.0.26-1.amzn2023.0.1
H Incorrect Synchronization	<1:11.0.26-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<1:11.0.26-1.amzn2023.0.1
H Symbolic Name not Mapping to Correct Object	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass by Primary Weakness	<1:11.0.26-1.amzn2023.0.1
H Time-of-check Time-of-use (TOCTOU)	<1:11.0.26-1.amzn2023.0.1
H Allocation of Resources Without Limits or Throttling	<1:11.0.26-1.amzn2023.0.1
H Incorrect Implementation of Authentication Algorithm	<1:11.0.26-1.amzn2023.0.1
H Excessive Platform Resource Consumption within a Loop	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Improper Certificate Validation	<1:11.0.26-1.amzn2023.0.1
H HTTP Request Smuggling	<1:11.0.26-1.amzn2023.0.1
H Missing Release of Resource after Effective Lifetime	<1:11.0.26-1.amzn2023.0.1
H Incomplete Cleanup	<1:11.0.26-1.amzn2023.0.1
H Authentication Bypass	<1:11.0.26-1.amzn2023.0.1
H Off-by-one Error	<1:11.0.26-1.amzn2023.0.1