Apache Tomcat^®

The Apache Tomcat^® software is an open source implementation of the Jakarta Servlet, Jakarta Pages, Jakarta Expression Language, Jakarta WebSocket, Jakarta Annotations and Jakarta Authentication specifications. These specifications are part of the Jakarta EE platform.

The Jakarta EE platform is the evolution of the Java EE platform. Tomcat 10 and later implement specifications developed as part of Jakarta EE. Tomcat 9 and earlier implement specifications developed as part of Java EE.

The Apache Tomcat software is developed in an open and participatory environment and released under the Apache License version 2. The Apache Tomcat project is intended to be a collaboration of the best-of-breed developers from around the world. We invite you to participate in this open development project. To learn more about getting involved, click here.

Apache Tomcat software powers numerous large-scale, mission-critical web applications across a diverse range of industries and organizations. Some of these users and their stories are listed on the PoweredBy wiki page.

Apache Tomcat, Tomcat, Apache, the Apache feather, and the Apache Tomcat project logo are trademarks of the Apache Software Foundation.

The Apache Tomcat Project is proud to announce the release of version 9.0.107 of Apache Tomcat. This release implements specifications that are part of the Java EE 8 platform. The notable changes compared to 9.0.106 include:

• Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk.
• Various improvements to HTTP/2
• Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX.

Full details of these changes, and all the other changes, are available in the Tomcat 9 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 11.0.9 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 11 platform.

Users of Tomcat 10 onwards should be aware that, as a result of the move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. This will almost certainly require code changes to enable applications to migrate from Tomcat 9 and earlier to Tomcat 10 and later. A migration tool is available to aid this process.

The notable changes in this release are:

• Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk.
• Various improvements to HTTP/2
• Fix JMX value for keepAliveCount on the endpoint. Also add the value of useVirtualThreads in JMX.

Full details of these changes, and all the other changes, are available in the Tomcat 11 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 10.1.43 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 10 platform.

Applications that run on Tomcat 9 and earlier will not run on Tomcat 10 without changes. Java EE based applications designed for Tomcat 9 and earlier may be placed in the $CATALINA_BASE/webapps-javaee directory and Tomcat will automatically convert them to Jakarta EE and copy them to the webapps directory. This conversion is performed using the Apache Tomcat migration tool for Jakarta EE tool which is also available as a separate download for off-line use.

The notable changes in this release are:

• Increase the default for maxPartCount from 10 to 50. Update the documentation to provide more details on the memory requirements to support multi-part uploads while avoiding a denial of service risk.
• Improvements to http/2 support, including data-frame padding, request statistics, and suppression of warnings when client certificate verification has been configured in certain environments.
• Fix a regression in the fix for CVE-2025-49125 that prevented access to PreResources and PostResources when mounted below the web application root with a path that was terminated with a file separator.

Full details of these changes, and all the other changes, are available in the Tomcat 10.1 changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 11.0.8 of Apache Tomcat. This release implements specifications that are part of the Jakarta EE 11 platform.

Users of Tomcat 10 onwards should be aware that, as a result of the move from Java EE to Jakarta EE as part of the transfer of Java EE to the Eclipse Foundation, the primary package for all implemented APIs has changed from javax.* to jakarta.*. This will almost certainly require code changes to enable applications to migrate from Tomcat 9 and earlier to Tomcat 10 and later. A migration tool is available to aid this process.

The notable changes in this release are:

• Provide finer grained control of multi-part request processing via two new attributes on the Connector element.
• Mark the JSP wrapper for reload after a failed compilation.
• Update Tomcat Native to 2.0.9 including Windows binaries built with OpenSSL 3.5.0.

Full details of these changes, and all the other changes, are available in the Tomcat 11 changelog.

The Apache Tomcat Project is proud to announce the release of version 2.0.9 of Tomcat Native. The notable changes compared to 2.0.8 include:

• Update the Windows build environment to use Visual Studio 2022.
• The windows binaries in this release have been built with OpenSSL 3.5.0 and APR 1.7.6

Download | Change log for 2.0.9

The Apache Tomcat Project is proud to announce the release of 1.0.9 of the Apache Tomcat Migration Tool for Jakarta EE. This release contains a number of bug fixes and improvements compared to version 1.0.8.

The notable changes in this release are:

• Fix an issue that matchExcludesAgainstPathName didn't work for files. Based on a pull request by Semiao Marco.
• Added a new profile, SERVLET that only migrates the javax.servlet package and sub-packages. Provided by Ralf Wiebicke.
• Update dependencies

Full details of these changes, and all the other changes, are available in the changelog.

Download

The Apache Tomcat Project is proud to announce the release of version 1.2.50 of Apache Tomcat Connectors. This version fixes a number of bugs found in previous releases.

Download | ChangeLog for 1.2.50

The Apache Tomcat Project is proud to announce the release of version 1.3.1 of Tomcat Native. The notable changes compared to 1.3.0 include:

• Fix a crash on Windows when SSLContext.setCACertificate() is invoked with a null value for caCertificateFile and a non-null value for caCertificatePath
• The windows binaries in this release have been built with OpenSSL 3.0.14

Download | Change log for 1.3.1

The Apache Tomcat Project is proud to announce the release of version 1.2.5 of the Standard Taglib. This tag library provides Apache's implementation of the JSTL 1.2 specification.

Version 1.2.5 is a minor bug fix release reverting a change made in 1.2.1 where <c:import> modified the HTTP method during POST operations, and fixing an issues that resulted in an AccessControlException during startup unless permission was granted to read the accessExternalEntity property.

Please see the Taglibs section for more details.

Download | Changes

The Apache Tomcat team is pleased to announce the release of Tomcat Maven Plugin 2.2. Changelog available here.

The Apache Tomcat Maven Plugin provides goals to manipulate WAR projects within the Apache Tomcat servlet container.

The binaries are available from Maven repositories. You should specify the version in your project's plugin configuration:

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat7-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

or

<plugin>
  <groupId>org.apache.tomcat.maven</groupId>
  <artifactId>tomcat6-maven-plugin</artifactId>
  <version>2.2</version>
</plugin>

See former announcements.