diff --git a/advisories/unreviewed/2026/08/GHSA-9xv2-5v5q-p794/GHSA-9xv2-5v5q-p794.json b/advisories/unreviewed/2026/08/GHSA-9xv2-5v5q-p794/GHSA-9xv2-5v5q-p794.json index 9d9f7067711..32635ab7448 100644 --- a/advisories/unreviewed/2026/08/GHSA-9xv2-5v5q-p794/GHSA-9xv2-5v5q-p794.json +++ b/advisories/unreviewed/2026/08/GHSA-9xv2-5v5q-p794/GHSA-9xv2-5v5q-p794.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9xv2-5v5q-p794", - "modified": "2026-08-26T18:31:49Z", + "modified": "2026-09-01T07:36:15Z", "published": "2026-08-26T00:30:52Z", "aliases": [ "CVE-2026-65905" @@ -13,7 +13,179 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 11.0.24" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.57" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat:tomcat-catalina" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.0.120" + } + } + ], "references": [ { "type": "ADVISORY", @@ -26,6 +198,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/08/26/4" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/tomcat" } ], "database_specific": {