tomcat11 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the tomcat11 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Incorrect Implementation of Authentication Algorithm	<0:11.0.26-0.1.hum1
L Incorrect Synchronization	<0:11.0.26-0.1.hum1
L HTTP Request Smuggling	<0:11.0.26-0.1.hum1
L Authentication Bypass by Primary Weakness	<0:11.0.26-0.1.hum1
L Improper Handling of Length Parameter Inconsistency	<0:11.0.26-0.1.hum1
M Improper Certificate Validation	<0:11.0.26-0.1.hum1
H HTTP Request Smuggling	<0:11.0.26-0.1.hum1
L Incomplete Cleanup	<0:11.0.26-0.1.hum1
H Authentication Bypass	<0:11.0.26-0.1.hum1
M Missing Release of Resource after Effective Lifetime	<0:11.0.26-0.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:11.0.26-0.1.hum1
H Excessive Platform Resource Consumption within a Loop	<0:11.0.26-0.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:11.0.26-0.1.hum1
H Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:11.0.25-0.1.hum1
M HTTP Request Smuggling	<0:11.0.25-0.1.hum1
M Authentication Bypass	<0:11.0.25-0.1.hum1
H Allocation of Resources Without Limits or Throttling	<0:11.0.25-0.1.hum1
L Time-of-check Time-of-use (TOCTOU)	<0:11.0.25-0.1.hum1
H Off-by-one Error	<0:11.0.25-0.1.hum1
L Symbolic Name not Mapping to Correct Object	<0:11.0.25-0.1.hum1
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:11.0.25-0.1.hum1
M Insufficient Session Expiration	<0:11.0.25-0.1.hum1
H Authentication Bypass by Primary Weakness	<0:11.0.26-0.1.hum1
H Authentication Bypass by Primary Weakness	<0:11.0.23-0.1.hum1
M Improper Handling of Case Sensitivity	<0:11.0.24-0.2.hum1
M Allocation of Resources Without Limits or Throttling	<0:11.0.25-0.1.hum1
L Insecure Default Initialization of Resource	<0:11.0.24-0.1.hum1
L Reliance on Untrusted Inputs in a Security Decision	<0:11.0.24-0.1.hum1
C Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:11.0.23-0.1.hum1
L Insufficient Logging	<0:11.0.23-0.1.hum1
L Detection of Error Condition Without Action	<0:11.0.23-0.1.hum1
H Authentication Bypass	<0:11.0.23-0.1.hum1
M Cross-site Scripting (XSS)	<0:11.0.23-0.1.hum1
M Improperly Implemented Security Check for Standard	<0:11.0.23-0.1.hum1
M Incorrect Behavior Order: Authorization Before Parsing and Canonicalization	<0:11.0.22-0.1.hum1
M Information Exposure	<0:11.0.22-0.1.hum1
L Information Exposure	<0:11.0.22-0.1.hum1
M Incorrect Implementation of Authentication Algorithm	<0:11.0.22-0.1.hum1
L Improper Input Validation	<0:11.0.21-0.1.hum1
M Improper Validation of Unsafe Equivalence in Input	<0:11.0.21-0.1.hum1
M Improper Resource Shutdown or Release	<0:11.0.21-0.1.hum1
M Improper Neutralization	<0:11.0.21-0.1.hum1
H Improper Certificate Validation	<0:11.0.21-0.1.hum1
H Directory Traversal	<0:11.0.21-0.1.hum1
M Session Fixation	<0:11.0.21-0.1.hum1

Vulnerability

Vulnerable Version

Incorrect Implementation of Authentication Algorithm

<0:11.0.26-0.1.hum1