Package · Maven

org.apache.tomcat:tomcat-coyote-ffm

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.4

CVE-2026-24734

Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

Improper Input Validation vulnerability in Apache Tomcat Native, Apache Tomcat. When using an OCSP responder, Tomcat Native (and Tomcat's FFM port of the Tomcat Native code) did not complete verification or freshness checks on the OCSP response which could al…

Apache Software Foundation Apache Tomcat Apache Tomcat Native tomcat9 Debian Ubuntu Alpine Maven

Feb 17, 2026