Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.tomcat:tomcat-coyote-ffm

3 known vulnerabilities (1 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 1 high, 1 medium
Dependents
0
Registry
Maven Central

Advisories 3

  • CVE-2026-34500Medium 6.5

    Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

    Affected: from 9.0.92, fixed in 9.0.117; from 10.1.22, fixed in 10.1.54; from 11.0.0-M14, fixed in 11.0.21.

  • CVE-2026-29145Critical 9.1

    Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

    Affected: from 9.0.83, fixed in 9.0.116; from 10.1.0-M7, fixed in 10.1.53; from 11.0.0-M1, fixed in 11.0.20.

  • Apache Tomcat Native, Apache Tomcat: OCSP revocation bypass

    Affected: from 11.0.0-M1, fixed in 11.0.18; from 10.1.0-M7, fixed in 10.1.52; from 9.0.83, fixed in 9.0.115.