diff --git a/advisories/unreviewed/2026/08/GHSA-f525-44xv-f2qj/GHSA-f525-44xv-f2qj.json b/advisories/unreviewed/2026/08/GHSA-f525-44xv-f2qj/GHSA-f525-44xv-f2qj.json index 148c9ed4d70..7f7966ac617 100644 --- a/advisories/unreviewed/2026/08/GHSA-f525-44xv-f2qj/GHSA-f525-44xv-f2qj.json +++ b/advisories/unreviewed/2026/08/GHSA-f525-44xv-f2qj/GHSA-f525-44xv-f2qj.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f525-44xv-f2qj", - "modified": "2026-08-26T18:31:49Z", + "modified": "2026-08-27T11:36:32Z", "published": "2026-08-26T00:30:52Z", "aliases": [ "CVE-2026-65637" @@ -13,7 +13,179 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.20" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.53" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.115" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.20" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.53" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.115" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-coyote" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.20" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-coyote" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.53" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-coyote" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.115" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + } + ], "references": [ { "type": "ADVISORY", @@ -22,6 +194,10 @@ { "type": "WEB", "url": "https://lists.apache.org/thread/djog953z1ohsyt25bdvhfzbmsy22vgcj" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/tomcat" } ], "database_specific": {