{"action":"Upgrade org.apache.tomcat:tomcat to 8.5.75 (8.x), 9.0.58 (9.x) or 10.0.16 (10.x) or later.","affected":[{"fixed":"10.0.16","introduced":"10.0.0"},{"fixed":"9.0.58","introduced":"9.0.0"},{"fixed":"8.5.75","introduced":"0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2022-23181"],"ecosystem":"Maven","epss":0.00692,"exploited":false,"fixed_versions":["10.0.16","9.0.58","8.5.75"],"ghsa_id":"GHSA-9f3j-pm6f-9fm5","id":"tcs_01M5N8PV1M2JBV4VY6AWF1HA2E","modified_at":"2024-02-22T05:33:13.787594Z","published_at":"2022-02-01T00:45:44Z","references":["https://osv.dev/vulnerability/GHSA-9f3j-pm6f-9fm5","https://nvd.nist.gov/vuln/detail/CVE-2022-23181","https://github.com/apache/tomcat","https://lists.apache.org/thread/l8x62p3k19yfcb208jo4zrb83k5mfwg9","https://lists.debian.org/debian-lts-announce/2022/10/msg00029.html","https://security.netapp.com/advisory/ntap-20220217-0010","https://www.debian.org/security/2022/dsa-5265","https://www.oracle.com/security-alerts/cpuapr2022.html","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":7},"sources":[{"source":"osv","source_id":"GHSA-9f3j-pm6f-9fm5","url":"https://osv.dev/vulnerability/GHSA-9f3j-pm6f-9fm5"}],"summary":"Race condition in Apache Tomcat"}