{"action":"Upgrade org.apache.tomcat:tomcat-coyote to 11.0.0-M11 or later.","affected":[{"fixed":"11.0.0-M11","introduced":"11.0.0-M1"}],"component":"org.apache.tomcat:tomcat-coyote","cve_ids":["CVE-2023-46589"],"ecosystem":"Maven","epss":0.02651,"exploited":false,"fixed_versions":["11.0.0-M11"],"ghsa_id":"GHSA-fccv-jmmp-qg76","id":"tcs_01M5N8VRT88XFQFGSFN7V67K9D","modified_at":"2026-10-02T20:30:05.627846032Z","published_at":"2023-11-28T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76","https://nvd.nist.gov/vuln/detail/CVE-2023-46589","https://github.com/apache/tomcat/commit/6f181e1062a472bc5f0234980f66cbde42c1041b","https://github.com/apache/tomcat/commit/7a2d8818fcea0b51747a67af9510ce7977245ebd","https://github.com/apache/tomcat/commit/aa92971e879a519384c517febc39fd04c48d4642","https://github.com/apache/tomcat/commit/b5776d769bffeade865061bc8ecbeb2b56167b08","https://github.com/apache/tomcat","https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr","https://lists.debian.org/debian-lts-announce/2024/01/msg00001.html","https://security.netapp.com/advisory/ntap-20231214-0009","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-11.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html","https://www.openwall.com/lists/oss-security/2023/11/28/2","http://www.openwall.com/lists/oss-security/2023/11/28/2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fccv-jmmp-qg76#Maven/org.apache.tomcat:tomcat-coyote","url":"https://osv.dev/vulnerability/GHSA-fccv-jmmp-qg76"}],"summary":"Apache Tomcat Improper Input Validation vulnerability"}