[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2008-5515":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":40,"aliases":41,"duplicate_of":9,"upstream":43,"downstream":44,"duplicates":71,"related":72,"reserved_at":9,"published_at":73,"modified_at":74,"state":75,"summary":76,"references_raw":85,"kevs":324,"epss":325,"epss_history":328,"metrics":548,"affected":558},"CVE-2008-5515","Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, 6.0.0 through 6.0.18, and possibly earlier versions normalizes the target pathname before filtering the query string when using the RequestDispatcher method, which allows remote attackers to bypass intended access restrictions and conduct directory traversal attacks via .. (dot dot) sequences and the WEB-INF directory in a Request.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","weakness","Stable","Base","High",[20,24,28,32,36],{"id":21,"name":22,"techniques":23},"CAPEC-126","Path Traversal",[],{"id":25,"name":26,"techniques":27},"CAPEC-64","Using Slashes and URL Encoding Combined to Bypass Validation Logic",[],{"id":29,"name":30,"techniques":31},"CAPEC-76","Manipulating Web Input to File System Calls",[],{"id":33,"name":34,"techniques":35},"CAPEC-78","Using Escaped Slashes in Alternate Encoding",[],{"id":37,"name":38,"techniques":39},"CAPEC-79","Using Slashes in Alternate Encoding",[],[],[42],"GHSA-9737-qmgc-hfr9",[],[45,47,49,51,53,55,57,59,61,63,65,67,69],{"_key":46},"RHSA-2009:1143",{"_key":48},"RHSA-2009:1144",{"_key":50},"RHSA-2009:1145",{"_key":52},"RHSA-2009:1146",{"_key":54},"RHSA-2009:1164",{"_key":56},"RHSA-2009:1454",{"_key":58},"RHSA-2009:1506",{"_key":60},"RHSA-2009:1562",{"_key":62},"RHSA-2009:1563",{"_key":64},"RHSA-2009:1616",{"_key":66},"RHSA-2009:1617",{"_key":68},"RHSA-2010:0602",{"_key":70},"DSA-2207-1",[],[],"2009-06-16T20:26:00.000Z","2024-08-07T10:56:46.803Z","Modified",{"cisa_kev":77,"cisa_ransomware":77,"cisa_vendor":9,"epss_severity":78,"epss_score":79,"severity":80,"severity_score":81,"severity_version":82,"severity_source":83,"severity_vector":84,"severity_status":75},false,"critical",0.72859,"medium",5,"v2.0","nvd","AV:N/AC:L/Au:N/C:P/I:N/A:N",[86,96,101,107,112,118,123,128,133,137,141,145,149,153,159,164,169,173,177,181,185,189,193,197,201,205,209,214,218,224,228,232,236,240,244,248,252,257,261,265,269,274,278,282,286,290,294,298,303,307,312,316,320],{"url":87,"sources":88,"tags":91},"http://tomcat.apache.org/security-4.html",[89,83,90],"cve.org","osv_maven",[92,93,94,95],"X Refsource CONFIRM","Patch","Vendor Advisory","WEB",{"url":97,"sources":98,"tags":99},"http://marc.info/?l=bugtraq&m=127420533226623&w=2",[89,83,90],[94,100,95],"X Refsource HP",{"url":102,"sources":103,"tags":104},"http://secunia.com/advisories/39317",[89,83],[105,106],"Third Party Advisory","X Refsource SECUNIA",{"url":108,"sources":109,"tags":110},"http://www.mandriva.com/security/advisories?name=MDVSA-2009:138",[89,83,90],[94,111,95],"X Refsource MANDRIVA",{"url":113,"sources":114,"tags":115},"http://www.vupen.com/english/advisories/2009/1535",[89,83],[116,117],"VDB Entry","X Refsource VUPEN",{"url":119,"sources":120,"tags":121},"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01246.html",[89,83,90],[94,122,95],"X Refsource FEDORA",{"url":124,"sources":125,"tags":126},"http://www.debian.org/security/2011/dsa-2207",[89,83,90],[94,127,95],"X Refsource DEBIAN",{"url":129,"sources":130,"tags":131},"http://jvn.jp/en/jp/JVN63832775/index.html",[89,83,90],[105,132,93,95],"X Refsource JVN",{"url":134,"sources":135,"tags":136},"http://marc.info/?l=bugtraq&m=136485229118404&w=2",[89,83,90],[94,100,95],{"url":138,"sources":139,"tags":140},"http://secunia.com/advisories/37460",[89,83],[105,106],{"url":142,"sources":143,"tags":144},"http://www.vupen.com/english/advisories/2010/3056",[89,83],[116,117],{"url":146,"sources":147,"tags":148},"http://www.vmware.com/security/advisories/VMSA-2009-0016.html",[89,83,90],[92,95],{"url":150,"sources":151,"tags":152},"http://secunia.com/advisories/35788",[89,83],[105,106],{"url":154,"sources":155,"tags":156},"http://www.securityfocus.com/archive/1/504202/100/0/threaded",[89,83],[157,158],"Mailing List","X Refsource BUGTRAQ",{"url":160,"sources":161,"tags":162},"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html",[89,83,90],[94,163,95],"X Refsource APPLE",{"url":165,"sources":166,"tags":167},"http://www.securityfocus.com/bid/35263",[89,83],[116,168,93],"X Refsource BID",{"url":170,"sources":171,"tags":172},"http://www.vupen.com/english/advisories/2009/1520",[89,83],[116,117,93,94],{"url":174,"sources":175,"tags":176},"http://secunia.com/advisories/44183",[89,83],[105,106],{"url":178,"sources":179,"tags":180},"http://www.vupen.com/english/advisories/2009/1856",[89,83],[116,117],{"url":182,"sources":183,"tags":184},"http://www.securityfocus.com/archive/1/504170/100/0/threaded",[89,83],[157,158],{"url":186,"sources":187,"tags":188},"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176",[89,83,90],[94,111,95],{"url":190,"sources":191,"tags":192},"http://www.securityfocus.com/archive/1/507985/100/0/threaded",[89,83],[157,158],{"url":194,"sources":195,"tags":196},"http://secunia.com/advisories/42368",[89,83],[105,106],{"url":198,"sources":199,"tags":200},"http://tomcat.apache.org/security-6.html",[89,83,90],[92,93,94,95],{"url":202,"sources":203,"tags":204},"http://secunia.com/advisories/35393",[89,83],[105,106],{"url":206,"sources":207,"tags":208},"http://support.apple.com/kb/HT4077",[89,83,90],[92,95],{"url":210,"sources":211,"tags":212},"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html",[89,83,90],[94,213,95],"X Refsource SUSE",{"url":215,"sources":216,"tags":217},"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01156.html",[89,83,90],[94,122,95],{"url":219,"sources":220,"tags":221},"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6445",[89,83],[116,222,223],"Signature","X Refsource OVAL",{"url":225,"sources":226,"tags":227},"http://secunia.com/advisories/35685",[89,83],[105,106],{"url":229,"sources":230,"tags":231},"https://www.redhat.com/archives/fedora-package-announce/2009-November/msg01216.html",[89,83,90],[94,122,95],{"url":233,"sources":234,"tags":235},"http://tomcat.apache.org/security-5.html",[89,83,90],[92,93,94,95],{"url":237,"sources":238,"tags":239},"http://www.fujitsu.com/global/support/software/security/products-f/interstage-200902e.html",[89,83,90],[92,95],{"url":241,"sources":242,"tags":243},"http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html",[89,83,90],[94,213,95],{"url":245,"sources":246,"tags":247},"http://marc.info/?l=bugtraq&m=129070310906557&w=2",[89,83,90],[94,100,95],{"url":249,"sources":250,"tags":251},"http://www.mandriva.com/security/advisories?name=MDVSA-2009:136",[89,83,90],[94,111,95],{"url":253,"sources":254,"tags":255},"http://sunsolve.sun.com/search/document.do?assetkey=1-26-263529-1",[89,83],[94,256],"X Refsource SUNALERT",{"url":258,"sources":259,"tags":260},"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10422",[89,83],[116,222,223],{"url":262,"sources":263,"tags":264},"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19452",[89,83],[116,222,223],{"url":266,"sources":267,"tags":268},"http://www.vupen.com/english/advisories/2009/3316",[89,83],[116,117],{"url":270,"sources":271,"tags":272},"https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],"X Refsource MLIST",{"url":275,"sources":276,"tags":277},"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":279,"sources":280,"tags":281},"https://lists.apache.org/thread.html/c62b0e3a7bf23342352a5810c640a94b6db69957c5c19db507004d74%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":283,"sources":284,"tags":285},"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":287,"sources":288,"tags":289},"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":291,"sources":292,"tags":293},"https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":295,"sources":296,"tags":297},"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf%40%3Cdev.tomcat.apache.org%3E",[89,83,90],[157,273,95],{"url":299,"sources":300,"tags":301},"https://nvd.nist.gov/vuln/detail/CVE-2008-5515",[90],[302],"Advisory",{"url":304,"sources":305,"tags":306},"https://github.com/apache/tomcat/commit/6b61911f94d6d8d49ee933c5f1882a7e7c336d2c",[90],[95],{"url":308,"sources":309,"tags":310},"https://github.com/apache/tomcat",[90],[311],"PACKAGE",{"url":313,"sources":314,"tags":315},"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:10422",[90],[95],{"url":317,"sources":318,"tags":319},"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19452",[90],[95],{"url":321,"sources":322,"tags":323},"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:6445",[90],[95],[],{"date":326,"score":79,"percentile":327},"2026-06-04",0.98795,[329,333,335,338,340,342,344,346,348,350,353,355,358,360,362,365,368,371,374,377,380,382,384,386,388,391,393,396,399,402,404,406,408,410,412,414,416,418,421,424,427,429,432,434,436,438,441,443,445,447,450,452,454,456,459,461,464,466,468,471,473,475,478,481,483,486,488,491,493,496,499,501,503,505,507,510,512,514,517,520,522,524,527,530,533,536,539,541,543,545],{"date":330,"score":331,"percentile":332},"2025-11-04",0.60688,0.98196,{"date":334,"score":331,"percentile":332},"2025-11-05",{"date":336,"score":331,"percentile":337},"2025-11-06",0.98197,{"date":339,"score":331,"percentile":332},"2025-11-07",{"date":341,"score":331,"percentile":332},"2025-11-08",{"date":343,"score":331,"percentile":332},"2025-11-09",{"date":345,"score":331,"percentile":332},"2025-11-10",{"date":347,"score":331,"percentile":332},"2025-11-11",{"date":349,"score":331,"percentile":337},"2025-11-12",{"date":351,"score":331,"percentile":352},"2025-11-13",0.98198,{"date":354,"score":331,"percentile":352},"2025-11-14",{"date":356,"score":331,"percentile":357},"2025-11-15",0.98195,{"date":359,"score":331,"percentile":357},"2025-11-16",{"date":361,"score":331,"percentile":332},"2025-11-17",{"date":363,"score":331,"percentile":364},"2025-11-18",0.98254,{"date":366,"score":331,"percentile":367},"2025-11-19",0.98255,{"date":369,"score":331,"percentile":370},"2025-11-20",0.98256,{"date":372,"score":331,"percentile":373},"2025-11-21",0.98191,{"date":375,"score":331,"percentile":376},"2025-11-22",0.98189,{"date":378,"score":331,"percentile":379},"2025-11-23",0.9819,{"date":381,"score":331,"percentile":379},"2025-11-24",{"date":383,"score":331,"percentile":373},"2025-11-25",{"date":385,"score":331,"percentile":373},"2025-11-26",{"date":387,"score":331,"percentile":373},"2025-11-27",{"date":389,"score":331,"percentile":390},"2025-11-28",0.98192,{"date":392,"score":331,"percentile":390},"2025-11-29",{"date":394,"score":331,"percentile":395},"2025-11-30",0.98193,{"date":397,"score":331,"percentile":398},"2025-12-01",0.98207,{"date":400,"score":331,"percentile":401},"2025-12-02",0.98209,{"date":403,"score":331,"percentile":401},"2025-12-03",{"date":405,"score":331,"percentile":390},"2025-12-04",{"date":407,"score":331,"percentile":390},"2025-12-05",{"date":409,"score":331,"percentile":395},"2025-12-06",{"date":411,"score":331,"percentile":357},"2025-12-07",{"date":413,"score":331,"percentile":357},"2025-12-08",{"date":415,"score":331,"percentile":357},"2025-12-09",{"date":417,"score":331,"percentile":337},"2025-12-10",{"date":419,"score":331,"percentile":420},"2025-12-11",0.982,{"date":422,"score":331,"percentile":423},"2025-12-12",0.98203,{"date":425,"score":331,"percentile":426},"2025-12-13",0.98201,{"date":428,"score":331,"percentile":426},"2025-12-14",{"date":430,"score":331,"percentile":431},"2025-12-15",0.98202,{"date":433,"score":331,"percentile":426},"2025-12-16",{"date":435,"score":331,"percentile":423},"2025-12-17",{"date":437,"score":331,"percentile":431},"2025-12-18",{"date":439,"score":331,"percentile":440},"2025-12-19",0.98205,{"date":442,"score":331,"percentile":440},"2025-12-20",{"date":444,"score":331,"percentile":431},"2025-12-21",{"date":446,"score":331,"percentile":423},"2025-12-22",{"date":448,"score":331,"percentile":449},"2025-12-23",0.98199,{"date":451,"score":331,"percentile":449},"2025-12-24",{"date":453,"score":331,"percentile":431},"2025-12-25",{"date":455,"score":331,"percentile":423},"2025-12-26",{"date":457,"score":331,"percentile":458},"2025-12-27",0.98221,{"date":460,"score":331,"percentile":440},"2025-12-28",{"date":462,"score":331,"percentile":463},"2025-12-29",0.98206,{"date":465,"score":331,"percentile":463},"2025-12-30",{"date":467,"score":331,"percentile":401},"2025-12-31",{"date":469,"score":331,"percentile":470},"2026-01-01",0.98227,{"date":472,"score":331,"percentile":470},"2026-01-02",{"date":474,"score":331,"percentile":470},"2026-01-03",{"date":476,"score":331,"percentile":477},"2026-01-04",0.98213,{"date":479,"score":331,"percentile":480},"2026-01-05",0.98214,{"date":482,"score":331,"percentile":480},"2026-01-06",{"date":484,"score":331,"percentile":485},"2026-01-07",0.98216,{"date":487,"score":331,"percentile":485},"2026-01-08",{"date":489,"score":331,"percentile":490},"2026-01-09",0.98219,{"date":492,"score":331,"percentile":458},"2026-01-10",{"date":494,"score":331,"percentile":495},"2026-01-11",0.98218,{"date":497,"score":331,"percentile":498},"2026-01-12",0.98217,{"date":500,"score":331,"percentile":498},"2026-01-13",{"date":502,"score":331,"percentile":495},"2026-01-14",{"date":504,"score":331,"percentile":490},"2026-01-15",{"date":506,"score":331,"percentile":458},"2026-01-16",{"date":508,"score":331,"percentile":509},"2026-01-17",0.98222,{"date":511,"score":331,"percentile":458},"2026-01-18",{"date":513,"score":331,"percentile":509},"2026-01-19",{"date":515,"score":331,"percentile":516},"2026-01-20",0.98223,{"date":518,"score":331,"percentile":519},"2026-01-21",0.98224,{"date":521,"score":331,"percentile":470},"2026-01-22",{"date":523,"score":331,"percentile":470},"2026-01-23",{"date":525,"score":331,"percentile":526},"2026-01-24",0.98229,{"date":528,"score":331,"percentile":529},"2026-01-25",0.9823,{"date":531,"score":331,"percentile":532},"2026-01-26",0.98231,{"date":534,"score":331,"percentile":535},"2026-01-27",0.98232,{"date":537,"score":331,"percentile":538},"2026-01-28",0.98233,{"date":540,"score":331,"percentile":538},"2026-01-29",{"date":542,"score":331,"percentile":538},"2026-01-30",{"date":544,"score":331,"percentile":535},"2026-01-31",{"date":546,"score":331,"percentile":547},"2026-02-01",0.98247,[549,553],{"source":83,"cvss_v2_0":550,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":81,"baseSeverity":9,"vectorString":84,"impactScore":551,"exploitabilityScore":552},2.9,10,{"source":90,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":554,"cvss_v4_0":9},{"baseScore":555,"baseSeverity":9,"vectorString":556,"impactScore":557,"exploitabilityScore":552},5.3,"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",2.3,[559,723],{"ecosystem":9,"name":560,"vendor":9,"product":560,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":561},"Tomcat",[562,565,567,569,571,573,575,577,579,581,583,585,587,589,591,593,595,597,599,601,603,605,607,609,611,613,615,617,619,621,623,625,627,629,631,633,635,637,639,641,643,645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,677,679,681,683,685,687,689,691,693,695,697,699,701,703,705,707,709,711,713,715,717,719,721],{"version":563,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.0","cpe",{"version":566,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.1",{"version":568,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.2",{"version":570,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.3",{"version":572,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.10",{"version":574,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.11",{"version":576,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.12",{"version":578,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.13",{"version":580,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.14",{"version":582,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.15",{"version":584,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.16",{"version":586,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.17",{"version":588,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.18",{"version":590,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.19",{"version":592,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.20",{"version":594,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.21",{"version":596,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.22",{"version":598,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.23",{"version":600,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.24",{"version":602,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.25",{"version":604,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.26",{"version":606,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.27",{"version":608,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.28",{"version":610,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.29",{"version":612,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.30",{"version":614,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.31",{"version":616,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.32",{"version":618,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.33",{"version":620,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.34",{"version":622,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.35",{"version":624,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.36",{"version":626,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.37",{"version":628,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.38",{"version":630,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"4.1.39",{"version":632,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.0",{"version":634,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.1",{"version":636,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.2",{"version":638,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.3",{"version":640,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.4",{"version":642,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.5",{"version":644,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.6",{"version":646,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.7",{"version":648,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.8",{"version":650,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.9",{"version":652,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.10",{"version":654,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.11",{"version":656,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.12",{"version":658,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.13",{"version":660,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.14",{"version":662,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.15",{"version":664,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.16",{"version":666,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.17",{"version":668,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.18",{"version":670,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.19",{"version":672,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.20",{"version":674,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.21",{"version":676,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.22",{"version":678,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.23",{"version":680,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.24",{"version":682,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.25",{"version":684,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.26",{"version":686,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"5.5.27",{"version":688,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0",{"version":690,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.0",{"version":692,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.1",{"version":694,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.2",{"version":696,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.3",{"version":698,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.4",{"version":700,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.5",{"version":702,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.6",{"version":704,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.7",{"version":706,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.9",{"version":708,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.10",{"version":710,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.12",{"version":712,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.13",{"version":714,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.14",{"version":716,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.15",{"version":718,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.16",{"version":720,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.17",{"version":722,"is_range":77,"range_type":564,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.0.18",{"ecosystem":724,"name":725,"vendor":726,"product":727,"cpe_part":9,"purl_type":728,"purl_namespace":726,"purl_name":727,"source":9,"versions":729},"Maven","org.apache.tomcat:tomcat","org.apache.tomcat","tomcat","maven",[730,737,740],{"version":731,"is_range":732,"range_type":733,"version_start":563,"version_start_type":734,"version_end":735,"version_end_type":736,"fixed_in":9},"gte4_1_0_lt4_1_40",true,"ecosystem","including","4.1.40","excluding",{"version":738,"is_range":732,"range_type":733,"version_start":632,"version_start_type":734,"version_end":739,"version_end_type":736,"fixed_in":9},"gte5_5_0_lt5_5_28","5.5.28",{"version":741,"is_range":732,"range_type":733,"version_start":690,"version_start_type":734,"version_end":742,"version_end_type":736,"fixed_in":9},"gte6_0_0_lt6_0_20","6.0.20"]