I Use This!
High Activity
Analyzed 1 day ago. based on code collected 2 days ago.

Project Summary

The Apache Tomcat software is an open source implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies.

Tags

apache http http_server java jsp servlet web web_services

Apache License 2.0
Permitted

Commercial Use

Modify

Distribute

Place Warranty

Sub-License

Private Use

Use Patent Claims

Forbidden

Hold Liable

Use Trademarks

Required

Include Copyright

State Changes

Include License

Include Notice

These details are provided for information only. No information here is legal advice and should not be used as such.

Project Security

Vulnerabilities per Version ( last 10 releases )

There are no reported vulnerabilities

Project Vulnerability Report

Security Confidence Index

Poor security track-record
Favorable security track-record

Vulnerability Exposure Index

Many reported vulnerabilities
Few reported vulnerabilities

Did You Know...

  • ...
    use of OSS increased in 65% of companies in 2016
  • ...
    you can embed statistics from Open Hub on your site
  • ...
    there are over 3,000 projects on the Open Hub with security vulnerabilities reported against them
  • ...
    compare projects before you chose one to use
About Project Security

Languages

Java
83%
XML
9%
XML Schema
6%
10 Other
2%

30 Day Summary

Feb 15 2024 — Mar 16 2024

12 Month Summary

Mar 16 2023 — Mar 16 2024
  • 1078 Commits
    Up + 83 (8%) from previous 12 months
  • 35 Contributors
    Up + 4 (12%) from previous 12 months

Ratings

316 users rate this project:
4.23101
   
4.2/5.0
Click to add your rating
  
Review this Project!
 

Static Analysis ( Generated by Coverity Scan for Apache Tomcat )

Repository URL: https://github.com/apache/tomcat

Version: 10.1.19-dev-f3b48f83

2024-01-15
Last Analyzed
258,554
Lines of Code Analyze
0.29
Defect Density

Defects by status for current build

1,219
Total defects
75
Outstanding
787
Fixed

CWE Top 25 defects

ID CWE-Name Number of Defects
79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 7