Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

apache/tomcat

              main @ 6623c2e
            

Fixes

CVEs

HIGH

Peak severity

42.9%

Coverage

Highlights

Denial of Service: 3 prior fixes. Scrutinize any change in this area.

java/org/apache/catalina/connector/Request.java: most-fixed (2 issues). Treat as high-risk during review.

9 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Arbitrary File Access: 1 historical fix(es) link java/org/apache/catalina/connector/Request.java to Arbitrary File Access.

Command Injection: 1 historical fix(es) link java/org/apache/catalina/servlets/CGIServlet.java to Command Injection.

Cross-Site Scripting: 1 historical fix(es) link java/org/apache/catalina/manager/HTMLManagerServlet.java, StatusTransformer.java to Cross-Site Scripting.