Vulnerable: version 10.1.26 is affected by 20 known vulnerabilities. See below.
www/apache-tomcat10 10.1.26 NetBSD
Implementation of Java Servlet and JavaServer Pages technologies
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- License
- apache-2.0
- Categories
- www
- Package size
- 12212.8 KiB, 16998.9 KiB installed
Description
Apache Tomcat is an implementation of the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed under the Java Community Process.
Apache Tomcat is developed in an open and participatory environment and released under the Apache Software License. Apache Tomcat is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project.
Apache Tomcat powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations.
This package tracks 10.x release branch.
Install
Binary package:
pkgin install apache-tomcat
From pkgsrc:
cd /usr/pkgsrc/www/apache-tomcat10 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 10.1.26 |
| NetBSD 10.1 aarch64 | 10.1.26 |
| SmartOS / illumos x86_64 | 10.1.26 |
| macOS 15 arm64 | 10.1.26 |
Dependencies
Run dependencies 1
No port depends on this one.
Known vulnerabilities 20
- apache-tomcat: directory-traversal
- apache-tomcat: denial-of-service
- apache-tomcat: denial-of-service
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: access-bypass (CVE-2016-5388)
- apache-tomcat: eol
- apache-tomcat: eol
- apache-tomcat: eol
- apache-tomcat: denial-of-service (CVE-2022-29885)
- apache-tomcat: remote-code-execution (CVE-2024-50379)
- apache-tomcat: sensitive-information-disclosure (CVE-2024-52317)
- apache-tomcat: cross-site-scripting (CVE-2024-52318)
- apache-tomcat: denial-of-service (CVE-2024-54677)
- apache-tomcat: race-condition (CVE-2024-56337)
- apache-tomcat: remote-code-execution (CVE-2025-24813)
- apache-tomcat: denial-of-service (CVE-2025-31650)
- apache-tomcat: security-bypass (CVE-2025-46701)
- apache-tomcat: denial-of-service (CVE-2025-48988)
- apache-tomcat: denial-of-service (CVE-2025-48989)