{"id":"CGA-hc6x-8jq6-cvh9","modified":"2026-09-07T01:38:56.240984973Z","published":"2025-10-30T20:13:19Z","upstream":["CVE-2020-8022","GHSA-gc58-v8h3-x2gr"],"references":[{"type":"WEB","url":"https://lists.apache.org/thread.html/r393d4f431683e99c839b4aed68f720b8583bca6c35cd84adccaa02be%40%3Cjava-dev.axis.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/r5be80ba868a11a1f64e4922399f171b8619bca4bc2039f79cf913928%40%3Cjava-dev.axis.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/ra87ec20a0f4b226c81c7eed27e5d7433ccdc41e61a8da408a45f0fa1%40%3Cusers.tomcat.apache.org%3E"},{"type":"WEB","url":"https://lists.apache.org/thread.html/rf50d02409e5732c4ee37f19a193af171251a25a652599ce3c2bc69e7%40%3Cusers.tomcat.apache.org%3E"},{"type":"ADVISORY","url":"http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00066.html"},{"type":"REPORT","url":"https://bugzilla.suse.com/show_bug.cgi?id=1172405"}],"affected":[{"package":{"name":"tomcat-8.5.87","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/tomcat-8.5.87?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0"}]}],"ecosystem_specific":{"components":[{"component_location":"/.PKGINFO","component_purl":"pkg:apk/tomcat-8.5.87","latest_event_status":"false_positive_determination","latest_event_timestamp":"2023-08-11T23:06:01Z","component_name":"tomcat-8.5.87","component_version":"","component_type":"apk"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-hc6x-8jq6-cvh9.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}