diff --git a/advisories/unreviewed/2026/06/GHSA-4x29-79gh-6v8q/GHSA-4x29-79gh-6v8q.json b/advisories/unreviewed/2026/06/GHSA-4x29-79gh-6v8q/GHSA-4x29-79gh-6v8q.json index e75838db7329..dd7eb59eafeb 100644 --- a/advisories/unreviewed/2026/06/GHSA-4x29-79gh-6v8q/GHSA-4x29-79gh-6v8q.json +++ b/advisories/unreviewed/2026/06/GHSA-4x29-79gh-6v8q/GHSA-4x29-79gh-6v8q.json @@ -1,11 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-4x29-79gh-6v8q", - "modified": "2026-06-30T15:30:43Z", + "modified": "2026-06-30T15:31:48Z", "published": "2026-06-29T21:32:15Z", "aliases": [ "CVE-2026-53434" ], + "summary": "CVE-2026-53434", "details": "Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector.\n\nThis issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118.\n\nUsers are recommended to upgrade to version 11.0.23, 10.1.56 or 9.0.119, which fixes the issue.", "severity": [ { @@ -13,7 +14,65 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "11.0.0-M1" + }, + { + "fixed": "11.0.23" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.1.0-M1" + }, + { + "fixed": "10.1.56" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.tomcat.embed:tomcat-embed-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0.M1" + }, + { + "fixed": "9.0.119" + } + ] + } + ] + } + ], "references": [ { "type": "ADVISORY",