{"action":"Upgrade org.apache.tomcat:tomcat-coyote to 8.5.94 (8.x) or 9.0.81 (9.x) or later.","affected":[{"fixed":"9.0.81","introduced":"9.0.70"},{"fixed":"8.5.94","introduced":"8.5.85"}],"component":"org.apache.tomcat:tomcat-coyote","cve_ids":["CVE-2023-42794"],"ecosystem":"Maven","epss":0.02304,"exploited":false,"fixed_versions":["9.0.81","8.5.94"],"ghsa_id":"GHSA-jm7m-8jh6-29hp","id":"tcs_01M5N9371PHJCZ6FRDKXWZRXET","modified_at":"2025-02-13T19:16:22Z","published_at":"2023-10-10T18:31:35Z","references":["https://osv.dev/vulnerability/GHSA-jm7m-8jh6-29hp","https://nvd.nist.gov/vuln/detail/CVE-2023-42794","https://github.com/apache/tomcat","https://lists.apache.org/thread/vvbr2ms7lockj1hlhz5q3wmxb2mwcw82","http://www.openwall.com/lists/oss-security/2023/10/10/8"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-jm7m-8jh6-29hp","url":"https://osv.dev/vulnerability/GHSA-jm7m-8jh6-29hp"}],"summary":"Apache Tomcat Incomplete Cleanup vulnerability"}