Skip to content
OpenAdvisories

Package · Maven

org.apache.tomcat:tomcat-util

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-53434

    Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

    Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users ar…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven