Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tomcat/tomcat-catalina@8.5.76
Typemaven
Namespaceorg.apache.tomcat
Nametomcat-catalina
Version8.5.76
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version8.5.86
Latest_non_vulnerable_version11.0.12
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-rk89-9dw5-w3gg
vulnerability_id VCID-rk89-9dw5-w3gg
summary 
Improper Resource Shutdown or Release
If a web application sends a WebSocket message concurrently with the WebSocket connection closing when running on Apache Tomcat 8.5.0 to 8.5.75 or Apache Tomcat 9.0.0.M1 to 9.0.20, it is possible that the application will continue to use the socket after it has been closed. The error handling triggered in this case could cause the a pooled object to be placed in the pool twice. This could result in subsequent connections using the same object concurrently which could result in data being returned to the wrong use and/or other errors.
references
0
reference_url https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7c
reference_id
reference_type
scores
url https://lists.apache.org/thread/6ckmjfb1k61dyzkto9vm2k5jvt4o7w7c
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-25762
reference_id CVE-2022-25762
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2022-25762
2
reference_url https://github.com/advisories/GHSA-h3ch-5pp2-vh6w
reference_id GHSA-h3ch-5pp2-vh6w
reference_type
scores
url https://github.com/advisories/GHSA-h3ch-5pp2-vh6w
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.76
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.76
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.76
1
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.21
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.21
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.21
aliases CVE-2022-25762, GHSA-h3ch-5pp2-vh6w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rk89-9dw5-w3gg
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.76