{"action":"Upgrade org.apache.tomcat:tomcat to 3.3.1a or later.","affected":[{"fixed":"3.3.1a","introduced":"0"}],"component":"org.apache.tomcat:tomcat","cve_ids":["CVE-2003-0045"],"ecosystem":"Maven","epss":0.02491,"exploited":false,"fixed_versions":["3.3.1a"],"ghsa_id":"GHSA-w97x-xfxf-f9xj","id":"tcs_01M5N9G01A2S6EMR9MZ8XG36C7","modified_at":"2023-11-08T03:56:45.164061Z","published_at":"2022-04-29T01:25:43Z","references":["https://osv.dev/vulnerability/GHSA-w97x-xfxf-f9xj","https://nvd.nist.gov/vuln/detail/CVE-2003-0045","https://exchange.xforce.ibmcloud.com/vulnerabilities/12102","http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-w97x-xfxf-f9xj","url":"https://osv.dev/vulnerability/GHSA-w97x-xfxf-f9xj"}],"summary":"Jakarta Tomcat Denial of Service vulnerability"}