{"action":"Upgrade org.apache.tomcat:tomcat to 8.5.78 (8.5.x), 9.0.62 (9.0.x), 10.0.20 (10.0.x) or 10.1.0-M14 (10.1.x) or later.","affected":[{"fixed":"8.5.78","introduced":"8.5.0"},{"fixed":"9.0.62","introduced":"9.0.0-M1"},{"fixed":"10.0.20","introduced":"10.0.0-M1"},{"fixed":"10.1.0-M14","introduced":"10.1.0-M1"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2021-43980"],"ecosystem":"Maven","epss":0.02362,"exploited":false,"fixed_versions":["8.5.78","9.0.62","10.0.20","10.1.0-M14"],"ghsa_id":"GHSA-jx7c-7mj5-9438","id":"tcs_01M5N93YS1KT5JDFCMPM7TAS2Y","modified_at":"2024-03-11T16:46:19.307324Z","published_at":"2022-09-29T00:00:25Z","references":["https://osv.dev/vulnerability/GHSA-jx7c-7mj5-9438","https://nvd.nist.gov/vuln/detail/CVE-2021-43980","https://github.com/apache/tomcat/commit/170e0f792bd18ff031677890ba2fe50eb7a376c1","https://github.com/apache/tomcat/commit/17f177eeb7df5938f67ef9ea580411b120195f13","https://github.com/apache/tomcat/commit/4a00b0c0890538b9d3107eef8f2e0afadd119beb","https://github.com/apache/tomcat/commit/9651b83a1d04583791525e5f0c4c9089f678d9fc","https://github.com/apache/tomcat","https://lists.apache.org/thread/3jjqbsp6j88b198x5rmg99b1qr8ht3g3","https://lists.debian.org/debian-lts-announce/2022/10/msg00029.html","https://tomcat.apache.org/security-10.html","https://tomcat.apache.org/security-8.html","https://tomcat.apache.org/security-9.html","https://www.debian.org/security/2022/dsa-5265","http://www.openwall.com/lists/oss-security/2022/09/28/1"],"severity":{"label":"low","score":3.7},"sources":[{"source":"osv","source_id":"GHSA-jx7c-7mj5-9438","url":"https://osv.dev/vulnerability/GHSA-jx7c-7mj5-9438"}],"summary":"Apache Tomcat Race Condition vulnerability"}