React2Shell Update: Critical in-the-wild React.js vulnerability exposes apps to remote code execution. Learn More

Bring Sonatype intelligence to your IDE and AI workflows with the Sonatype MCP server.
Discover, assess, and secure your open source components with confidence.
From selecting the best versions to identifying vulnerabilities, ensuring license compliance, and receiving real-time remediation guidance,
everything you need to build safer software, faster. Get setup now

tomcat-catalina

org.apache.tomcat

Version 9.0.40

Report advisory or correction

Vulnerabilities

3 critical

6 high

9 medium

Sign up and see:

Detailed component information including:

Version history
Declared licenses
Vulnerability details