{"action":"Upgrade org.apache.tomcat:tomcat to 8.5.75 (8.x) or 9.0.20 (9.x) or later.","affected":[{"fixed":"8.5.75","introduced":"8.5.0"},{"fixed":"9.0.20","introduced":"9.0.0M1"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2022-25762"],"ecosystem":"Maven","epss":0.08405,"exploited":false,"fixed_versions":["8.5.75","9.0.20"],"ghsa_id":"GHSA-h3ch-5pp2-vh6w","id":"tcs_01M5N8ZFVETCKZ88PQ9M4RRTQA","modified_at":"2026-05-18T09:41:06.442327454Z","published_at":"2022-05-14T00:01:50Z","references":["https://osv.dev/vulnerability/GHSA-h3ch-5pp2-vh6w","https://nvd.nist.gov/vuln/detail/CVE-2022-25762","https://github.com/apache/tomcat","https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7c","https://security.netapp.com/advisory/ntap-20220629-0003","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-h3ch-5pp2-vh6w","url":"https://osv.dev/vulnerability/GHSA-h3ch-5pp2-vh6w"}],"summary":"Improper socket reuse in Apache Tomcat"}