{"action":"Upgrade org.apache.tomcat:tomcat-util to 9.0.119 (9.x), 10.1.56 (10.x) or 11.0.23 (11.x) or later.","affected":[{"fixed":"11.0.23","introduced":"11.0.0-M1"},{"fixed":"10.1.56","introduced":"10.1.0-M7"},{"fixed":"9.0.119","introduced":"9.0.83"}],"component":"org.apache.tomcat:tomcat-util","cve_ids":["CVE-2026-53434"],"ecosystem":"Maven","epss":0.00586,"exploited":false,"fixed_versions":["11.0.23","10.1.56","9.0.119"],"ghsa_id":"GHSA-4x29-79gh-6v8q","id":"tcs_01M5NDPKVD22C276GB9XZAZZQB","modified_at":"2026-10-23T22:00:03.948016311Z","published_at":"2026-06-29T21:32:15Z","references":["https://osv.dev/vulnerability/GHSA-4x29-79gh-6v8q","https://nvd.nist.gov/vuln/detail/CVE-2026-53434","https://github.com/apache/tomcat/commit/7f8ecdbd930d8c5a7fae73aa0eec9124d919e2f5","https://github.com/apache/tomcat/commit/c48ac39c27f4494f8c96b9d56a487253e362d276","https://github.com/apache/tomcat/commit/feec60d6099727db6f911534f6a0f6926ebab070","https://lists.apache.org/thread/x510lbq0sfrd1qyo7q3r1mpllgpdcosk","http://www.openwall.com/lists/oss-security/2026/06/29/22"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-4x29-79gh-6v8q","url":"https://osv.dev/vulnerability/GHSA-4x29-79gh-6v8q"}],"summary":"Apache Tomcat util accepted misconfigured CRLs"}