{"action":"Upgrade org.apache.tomcat:tomcat-coyote to 9.0.90 (9.x), 10.1.25 (10.x) or 11.0.0-M21 (11.x) or later.","affected":[{"fixed":"11.0.0-M21","introduced":"11.0.0-M1"},{"fixed":"10.1.25","introduced":"10.1.0-M1"},{"fixed":"9.0.90","introduced":"9.0.0-M1"},{"introduced":"8.5.0","last_affected":"8.5.100"}],"component":"org.apache.tomcat:tomcat-coyote","cve_ids":["CVE-2024-34750"],"ecosystem":"Maven","epss":0.04602,"exploited":false,"fixed_versions":["11.0.0-M21","10.1.25","9.0.90"],"ghsa_id":"GHSA-wm9w-rjj3-j356","id":"tcs_01M5N9GRPGV1CHPHM8S3XJNGEC","modified_at":"2026-09-10T03:50:17.269240047Z","published_at":"2024-07-03T21:39:44Z","references":["https://osv.dev/vulnerability/GHSA-wm9w-rjj3-j356","https://nvd.nist.gov/vuln/detail/CVE-2024-34750","https://github.com/apache/tomcat/commit/2344a4c0d03e307ba6b8ab6dc8b894cc8bac63f2","https://github.com/apache/tomcat/commit/2afae300c9ac9c0e516e2e9de580847d925365c3","https://github.com/apache/tomcat/commit/9fec9a82887853402833a80b584e3762c7423f5f","https://github.com/apache/tomcat","https://lists.apache.org/thread/4kqf0bc9gxymjc2x7v3p7dvplnl77y8l","https://lists.debian.org/debian-lts-announce/2025/07/msg00009.html","https://security.netapp.com/advisory/ntap-20240816-0004","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-9.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-wm9w-rjj3-j356#Maven/org.apache.tomcat:tomcat-coyote","url":"https://osv.dev/vulnerability/GHSA-wm9w-rjj3-j356"}],"summary":"Apache Tomcat - Denial of Service"}