[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2019-0199":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":86,"aliases":87,"duplicate_of":9,"upstream":89,"downstream":90,"duplicates":119,"related":120,"reserved_at":9,"published_at":131,"modified_at":132,"state":133,"summary":134,"references_raw":143,"kevs":414,"epss":415,"epss_history":418,"metrics":643,"affected":655},"CVE-2019-0199","The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-400","Uncontrolled Resource Consumption","The product does not properly control the allocation and maintenance of a limited resource.","weakness","Draft","Class","High",[20,24,82],{"id":21,"name":22,"techniques":23},"CAPEC-147","XML Ping of the Death",[],{"id":25,"name":26,"techniques":27},"CAPEC-227","Sustained Client Engagement",[28],{"id":29,"name":30,"tactics":31,"countermeasures":35},"T1499","Endpoint Denial of Service",[32],{"id":33,"name":34},"TA0105","Impact",[36,41,45,49,53,57,61,65,69,73,78],{"id":37,"name":38,"tactic":39},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":40},"Detect",{"id":42,"name":43,"tactic":44},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":40},{"id":46,"name":47,"tactic":48},"D3-CSPP","Client-server Payload Profiling",{"name":40},{"id":50,"name":51,"tactic":52},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":40},{"id":54,"name":55,"tactic":56},"D3-NTSA","Network Traffic Signature Analysis",{"name":40},{"id":58,"name":59,"tactic":60},"D3-APCA","Application Protocol Command Analysis",{"name":40},{"id":62,"name":63,"tactic":64},"D3-NTCD","Network Traffic Community Deviation",{"name":40},{"id":66,"name":67,"tactic":68},"D3-RTSD","Remote Terminal Session Detection",{"name":40},{"id":70,"name":71,"tactic":72},"D3-ISVA","Inbound Session Volume Analysis",{"name":40},{"id":74,"name":75,"tactic":76},"D3-NTF","Network Traffic Filtering",{"name":77},"Isolate",{"id":79,"name":80,"tactic":81},"D3-ITF","Inbound Traffic Filtering",{"name":77},{"id":83,"name":84,"techniques":85},"CAPEC-492","Regular Expression Exponential Blowup",[],[],[88],"GHSA-qcxh-w3j9-58qr",[],[91,93,95,97,99,101,103,105,107,109,111,113,115,117],{"_key":92},"UBUNTU-CVE-2019-0199",{"_key":94},"SUSE-SU-2019:1693-1",{"_key":96},"SUSE-SU-2019:1825-1",{"_key":98},"SUSE-SU-2019:1866-1",{"_key":100},"SUSE-SU-2019:1895-1",{"_key":102},"OPENSUSE-SU-2019:1673-1",{"_key":104},"OPENSUSE-SU-2019:1723-1",{"_key":106},"OPENSUSE-SU-2019:1808-1",{"_key":108},"OPENSUSE-SU-2024:11468-1",{"_key":110},"OPENSUSE-SU-2024:13441-1",{"_key":112},"DSA-4596-1",{"_key":114},"MGASA-2019-0260",{"_key":116},"DEBIAN-CVE-2019-0199",{"_key":118},"RHSA-2019:3929",[],[121,122,123,124,125,126,127,128,129,130],{"_key":114},{"_key":94},{"_key":96},{"_key":98},{"_key":100},{"_key":102},{"_key":104},{"_key":106},{"_key":108},{"_key":110},"2019-04-10T14:21:50.000Z","2024-08-04T17:44:15.322Z","Modified",{"cisa_kev":135,"cisa_ransomware":135,"cisa_vendor":9,"epss_severity":136,"epss_score":137,"severity":138,"severity_score":139,"severity_version":140,"severity_source":141,"severity_vector":142,"severity_status":133},false,"critical",0.65581,"high",7.5,"v3.0","nvd","CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[144,152,158,162,166,170,176,180,184,188,192,196,200,204,208,212,216,220,226,230,235,239,243,249,253,257,262,266,271,276,280,284,288,292,296,300,305,309,313,317,321,325,329,333,337,341,345,349,353,357,361,366,370,374,378,382,386,390,394,398,402,406,410],{"url":145,"sources":146,"tags":149},"https://lists.apache.org/thread.html/e1b0b273b6e8ddcc72c9023bc2394b1276fc72664144bf21d0a87995%40%3Cannounce.tomcat.apache.org%3E",[147,141,148],"cve.org","osv_maven",[150,151],"X Refsource MISC","WEB",{"url":153,"sources":154,"tags":155},"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],"Mailing List","X Refsource MLIST",{"url":159,"sources":160,"tags":161},"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":163,"sources":164,"tags":165},"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":167,"sources":168,"tags":169},"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":171,"sources":172,"tags":173},"https://security.netapp.com/advisory/ntap-20190419-0001/",[147,141],[174,175],"X Refsource CONFIRM","Third Party Advisory",{"url":177,"sources":178,"tags":179},"https://lists.apache.org/thread.html/e56886e1bac9319ecce81b3612dd7a1a43174a3a741a1c805e16880e%40%3Ccommits.tomee.apache.org%3E",[147,141,148],[156,157,151],{"url":181,"sources":182,"tags":183},"https://lists.apache.org/thread.html/9fe25f98bac6d66f8a663a15c37a98bc2d8f8bbed1d408791a3e4067%40%3Cusers.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":185,"sources":186,"tags":187},"https://lists.apache.org/thread.html/4c438fa4c78cb1ce8979077f668ab7145baf83e7c59f2faf7eccf094%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":189,"sources":190,"tags":191},"https://lists.apache.org/thread.html/cf4eb2bd2083cebb3602a293c653f9a7faa96c86f672c876f25b37ef%40%3Cannounce.apache.org%3E",[147,141,148],[156,157,151],{"url":193,"sources":194,"tags":195},"https://lists.apache.org/thread.html/df1a2c1b87c8a6c500ecdbbaf134c7f1491c8d79d98b48c6b9f0fa6a%40%3Cannounce.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":197,"sources":198,"tags":199},"https://lists.apache.org/thread.html/158ab719cf60448ddbb074798f09152fdb572fc8f781e70a56118d1a%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":201,"sources":202,"tags":203},"https://lists.apache.org/thread.html/e87733036e8c84ea648cdcdca3098f3c8a897e2652c33062b2b1535c%40%3Cusers.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":205,"sources":206,"tags":207},"https://lists.apache.org/thread.html/a7a201bd23e67fd3326c9b22b814dd0537d3270b3b54a768e2e7ef50%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":209,"sources":210,"tags":211},"https://lists.apache.org/thread.html/dddb3590bac28fbe89f69f5ccbe26283d014ddc691abdd042de14600%40%3Cannounce.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":213,"sources":214,"tags":215},"https://lists.apache.org/thread.html/7bb193bc68b28d21ff1c726fd38bea164deb6333b59eec2eb3661da6%40%3Cusers.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":217,"sources":218,"tags":219},"https://lists.apache.org/thread.html/ac0185ce240a711b542a55bccf9349ab0c2f343d70cf7835e08fabc9%40%3Cannounce.apache.org%3E",[147,141,148],[156,157,151],{"url":221,"sources":222,"tags":223},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46/",[147,141],[224,225],"Vendor Advisory","X Refsource FEDORA",{"url":227,"sources":228,"tags":229},"https://support.f5.com/csp/article/K17321505",[147,141,148],[174,151],{"url":231,"sources":232,"tags":233},"http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00090.html",[147,141,148],[224,234,151],"X Refsource SUSE",{"url":236,"sources":237,"tags":238},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3/",[147,141],[224,225],{"url":240,"sources":241,"tags":242},"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",[147,141,148],[150,151],{"url":244,"sources":245,"tags":246},"http://www.securityfocus.com/bid/107674",[147,141],[247,248],"VDB Entry","X Refsource BID",{"url":250,"sources":251,"tags":252},"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00013.html",[147,141,148],[224,234,151],{"url":254,"sources":255,"tags":256},"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00054.html",[147,141,148],[224,234,151],{"url":258,"sources":259,"tags":260},"https://access.redhat.com/errata/RHSA-2019:3929",[147,141,148],[224,261,151],"X Refsource REDHAT",{"url":263,"sources":264,"tags":265},"https://access.redhat.com/errata/RHSA-2019:3931",[147,141,148],[224,261,151],{"url":267,"sources":268,"tags":269},"https://www.debian.org/security/2019/dsa-4596",[147,141,148],[224,270,151],"X Refsource DEBIAN",{"url":272,"sources":273,"tags":274},"https://seclists.org/bugtraq/2019/Dec/43",[147,141,148],[156,275,151],"X Refsource BUGTRAQ",{"url":277,"sources":278,"tags":279},"https://www.oracle.com/security-alerts/cpujan2020.html",[147,141,148],[150,151],{"url":281,"sources":282,"tags":283},"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":285,"sources":286,"tags":287},"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":289,"sources":290,"tags":291},"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":293,"sources":294,"tags":295},"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0%40%3Cdev.tomcat.apache.org%3E",[147,141,148],[156,157,151],{"url":297,"sources":298,"tags":299},"https://www.oracle.com/security-alerts/cpuapr2020.html",[147,141,148],[150,151],{"url":301,"sources":302,"tags":303},"https://nvd.nist.gov/vuln/detail/CVE-2019-0199",[148],[304],"Advisory",{"url":306,"sources":307,"tags":308},"https://lists.apache.org/thread.html/e1b0b273b6e8ddcc72c9023bc2394b1276fc72664144bf21d0a87995@%3Cannounce.tomcat.apache.org%3E",[148],[151],{"url":310,"sources":311,"tags":312},"https://lists.apache.org/thread.html/e56886e1bac9319ecce81b3612dd7a1a43174a3a741a1c805e16880e@%3Ccommits.tomee.apache.org%3E",[148],[151],{"url":314,"sources":315,"tags":316},"https://lists.apache.org/thread.html/e85e83e9954f169bbb77b44baae5a33d8de878df557bb32b7f793661@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":318,"sources":319,"tags":320},"https://lists.apache.org/thread.html/e87733036e8c84ea648cdcdca3098f3c8a897e2652c33062b2b1535c@%3Cusers.tomcat.apache.org%3E",[148],[151],{"url":322,"sources":323,"tags":324},"https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":326,"sources":327,"tags":328},"https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":330,"sources":331,"tags":332},"https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":334,"sources":335,"tags":336},"https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":338,"sources":339,"tags":340},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3",[148],[151],{"url":342,"sources":343,"tags":344},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46",[148],[151],{"url":346,"sources":347,"tags":348},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NPHQEL5AQ6LZSZD2Y6TYZ4RC3WI7NXJ3",[148],[151],{"url":350,"sources":351,"tags":352},"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQTZ5BJ5F4KV6N53SGNKSW3UY5DBIQ46",[148],[151],{"url":354,"sources":355,"tags":356},"https://security.netapp.com/advisory/ntap-20190419-0001",[148],[151],{"url":358,"sources":359,"tags":360},"https://web.archive.org/web/20200227030041/http://www.securityfocus.com/bid/107674",[148],[151],{"url":362,"sources":363,"tags":364},"https://github.com/apache/tomcat",[148],[365],"PACKAGE",{"url":367,"sources":368,"tags":369},"https://lists.apache.org/thread.html/158ab719cf60448ddbb074798f09152fdb572fc8f781e70a56118d1a@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":371,"sources":372,"tags":373},"https://lists.apache.org/thread.html/1dd0a59c1295cc08ce4c9e7edae5ad2268acc9ba55adcefa0532e5ba@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":375,"sources":376,"tags":377},"https://lists.apache.org/thread.html/4c438fa4c78cb1ce8979077f668ab7145baf83e7c59f2faf7eccf094@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":379,"sources":380,"tags":381},"https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":383,"sources":384,"tags":385},"https://lists.apache.org/thread.html/7bb193bc68b28d21ff1c726fd38bea164deb6333b59eec2eb3661da6@%3Cusers.tomcat.apache.org%3E",[148],[151],{"url":387,"sources":388,"tags":389},"https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":391,"sources":392,"tags":393},"https://lists.apache.org/thread.html/9fe25f98bac6d66f8a663a15c37a98bc2d8f8bbed1d408791a3e4067@%3Cusers.tomcat.apache.org%3E",[148],[151],{"url":395,"sources":396,"tags":397},"https://lists.apache.org/thread.html/a7a201bd23e67fd3326c9b22b814dd0537d3270b3b54a768e2e7ef50@%3Cdev.tomcat.apache.org%3E",[148],[151],{"url":399,"sources":400,"tags":401},"https://lists.apache.org/thread.html/ac0185ce240a711b542a55bccf9349ab0c2f343d70cf7835e08fabc9@%3Cannounce.apache.org%3E",[148],[151],{"url":403,"sources":404,"tags":405},"https://lists.apache.org/thread.html/cf4eb2bd2083cebb3602a293c653f9a7faa96c86f672c876f25b37ef@%3Cannounce.apache.org%3E",[148],[151],{"url":407,"sources":408,"tags":409},"https://lists.apache.org/thread.html/dddb3590bac28fbe89f69f5ccbe26283d014ddc691abdd042de14600@%3Cannounce.tomcat.apache.org%3E",[148],[151],{"url":411,"sources":412,"tags":413},"https://lists.apache.org/thread.html/df1a2c1b87c8a6c500ecdbbaf134c7f1491c8d79d98b48c6b9f0fa6a@%3Cannounce.tomcat.apache.org%3E",[148],[151],[],{"date":416,"score":137,"percentile":417},"2026-06-04",0.98511,[419,423,426,428,431,433,435,437,440,442,445,447,450,452,454,458,461,464,466,469,472,474,476,478,481,483,485,487,491,494,497,499,501,504,506,508,510,512,514,517,520,522,524,526,529,531,534,537,539,541,543,545,548,550,552,555,558,560,562,565,567,569,572,575,577,579,581,584,587,589,592,594,597,600,603,606,609,612,614,616,619,621,625,627,629,631,633,635,637,639],{"date":420,"score":421,"percentile":422},"2025-11-04",0.66569,0.98455,{"date":424,"score":421,"percentile":425},"2025-11-05",0.98454,{"date":427,"score":421,"percentile":425},"2025-11-06",{"date":429,"score":421,"percentile":430},"2025-11-07",0.98453,{"date":432,"score":421,"percentile":430},"2025-11-08",{"date":434,"score":421,"percentile":430},"2025-11-09",{"date":436,"score":421,"percentile":430},"2025-11-10",{"date":438,"score":421,"percentile":439},"2025-11-11",0.98452,{"date":441,"score":421,"percentile":422},"2025-11-12",{"date":443,"score":421,"percentile":444},"2025-11-13",0.98457,{"date":446,"score":421,"percentile":444},"2025-11-14",{"date":448,"score":421,"percentile":449},"2025-11-15",0.98456,{"date":451,"score":421,"percentile":449},"2025-11-16",{"date":453,"score":421,"percentile":449},"2025-11-17",{"date":455,"score":456,"percentile":457},"2025-11-18",0.65382,0.98484,{"date":459,"score":456,"percentile":460},"2025-11-19",0.98485,{"date":462,"score":456,"percentile":463},"2025-11-20",0.98487,{"date":465,"score":421,"percentile":439},"2025-11-21",{"date":467,"score":421,"percentile":468},"2025-11-22",0.98449,{"date":470,"score":421,"percentile":471},"2025-11-23",0.98447,{"date":473,"score":421,"percentile":471},"2025-11-24",{"date":475,"score":421,"percentile":468},"2025-11-25",{"date":477,"score":421,"percentile":468},"2025-11-26",{"date":479,"score":421,"percentile":480},"2025-11-27",0.9845,{"date":482,"score":421,"percentile":468},"2025-11-28",{"date":484,"score":421,"percentile":468},"2025-11-29",{"date":486,"score":421,"percentile":468},"2025-11-30",{"date":488,"score":489,"percentile":490},"2025-12-01",0.38697,0.97102,{"date":492,"score":489,"percentile":493},"2025-12-02",0.97103,{"date":495,"score":489,"percentile":496},"2025-12-03",0.97104,{"date":498,"score":421,"percentile":468},"2025-12-04",{"date":500,"score":421,"percentile":480},"2025-12-05",{"date":502,"score":421,"percentile":503},"2025-12-06",0.98451,{"date":505,"score":421,"percentile":439},"2025-12-07",{"date":507,"score":421,"percentile":439},"2025-12-08",{"date":509,"score":421,"percentile":430},"2025-12-09",{"date":511,"score":421,"percentile":422},"2025-12-10",{"date":513,"score":421,"percentile":444},"2025-12-11",{"date":515,"score":421,"percentile":516},"2025-12-12",0.98459,{"date":518,"score":421,"percentile":519},"2025-12-13",0.98458,{"date":521,"score":421,"percentile":516},"2025-12-14",{"date":523,"score":421,"percentile":519},"2025-12-15",{"date":525,"score":421,"percentile":516},"2025-12-16",{"date":527,"score":421,"percentile":528},"2025-12-17",0.98461,{"date":530,"score":421,"percentile":528},"2025-12-18",{"date":532,"score":421,"percentile":533},"2025-12-19",0.98463,{"date":535,"score":421,"percentile":536},"2025-12-20",0.98462,{"date":538,"score":421,"percentile":533},"2025-12-21",{"date":540,"score":421,"percentile":533},"2025-12-22",{"date":542,"score":421,"percentile":533},"2025-12-23",{"date":544,"score":421,"percentile":536},"2025-12-24",{"date":546,"score":421,"percentile":547},"2025-12-25",0.98464,{"date":549,"score":421,"percentile":533},"2025-12-26",{"date":551,"score":421,"percentile":460},"2025-12-27",{"date":553,"score":421,"percentile":554},"2025-12-28",0.98466,{"date":556,"score":421,"percentile":557},"2025-12-29",0.98467,{"date":559,"score":421,"percentile":557},"2025-12-30",{"date":561,"score":421,"percentile":557},"2025-12-31",{"date":563,"score":489,"percentile":564},"2026-01-01",0.97138,{"date":566,"score":489,"percentile":564},"2026-01-02",{"date":568,"score":489,"percentile":564},"2026-01-03",{"date":570,"score":421,"percentile":571},"2026-01-04",0.98468,{"date":573,"score":421,"percentile":574},"2026-01-05",0.98469,{"date":576,"score":421,"percentile":574},"2026-01-06",{"date":578,"score":421,"percentile":574},"2026-01-07",{"date":580,"score":421,"percentile":574},"2026-01-08",{"date":582,"score":421,"percentile":583},"2026-01-09",0.98471,{"date":585,"score":421,"percentile":586},"2026-01-10",0.98473,{"date":588,"score":421,"percentile":586},"2026-01-11",{"date":590,"score":421,"percentile":591},"2026-01-12",0.98472,{"date":593,"score":421,"percentile":591},"2026-01-13",{"date":595,"score":421,"percentile":596},"2026-01-14",0.98475,{"date":598,"score":421,"percentile":599},"2026-01-15",0.98476,{"date":601,"score":421,"percentile":602},"2026-01-16",0.98477,{"date":604,"score":421,"percentile":605},"2026-01-17",0.98478,{"date":607,"score":421,"percentile":608},"2026-01-18",0.9848,{"date":610,"score":421,"percentile":611},"2026-01-19",0.98481,{"date":613,"score":421,"percentile":608},"2026-01-20",{"date":615,"score":421,"percentile":608},"2026-01-21",{"date":617,"score":421,"percentile":618},"2026-01-22",0.98482,{"date":620,"score":421,"percentile":457},"2026-01-23",{"date":622,"score":623,"percentile":624},"2026-01-24",0.66239,0.9847,{"date":626,"score":623,"percentile":574},"2026-01-25",{"date":628,"score":623,"percentile":591},"2026-01-26",{"date":630,"score":623,"percentile":586},"2026-01-27",{"date":632,"score":623,"percentile":586},"2026-01-28",{"date":634,"score":623,"percentile":586},"2026-01-29",{"date":636,"score":623,"percentile":586},"2026-01-30",{"date":638,"score":623,"percentile":586},"2026-01-31",{"date":640,"score":641,"percentile":642},"2026-02-01",0.38287,0.97142,[644,653],{"source":141,"cvss_v2_0":645,"cvss_v3_0":650,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":646,"baseSeverity":9,"vectorString":647,"impactScore":648,"exploitabilityScore":649},5,"AV:N/AC:L/Au:N/C:N/I:N/A:P",2.9,10,{"baseScore":139,"baseSeverity":651,"vectorString":142,"impactScore":652,"exploitabilityScore":649},"HIGH",6,{"source":148,"cvss_v2_0":9,"cvss_v3_0":654,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":139,"baseSeverity":9,"vectorString":142,"impactScore":652,"exploitabilityScore":649},[656,712,729],{"ecosystem":9,"name":657,"vendor":9,"product":657,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":658},"Tomcat",[659,666,670,672,674,676,678,680,682,684,686,688,690,692,694,696,698,700,702,704,706,708,710],{"version":660,"is_range":661,"range_type":662,"version_start":663,"version_start_type":664,"version_end":665,"version_end_type":664,"fixed_in":9},"gte8.5.0_lte8.5.37",true,"cpe","8.5.0","including","8.5.37",{"version":667,"is_range":661,"range_type":662,"version_start":668,"version_start_type":664,"version_end":669,"version_end_type":664,"fixed_in":9},"gte9.0.1_lte9.0.14","9.0.1","9.0.14",{"version":671,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone1",{"version":673,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone10",{"version":675,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone11",{"version":677,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone12",{"version":679,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone13",{"version":681,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone14",{"version":683,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone15",{"version":685,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone16",{"version":687,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone17",{"version":689,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone18",{"version":691,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone19",{"version":693,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone2",{"version":695,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone20",{"version":697,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone21",{"version":699,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone3",{"version":701,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone4",{"version":703,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone5",{"version":705,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone6",{"version":707,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone7",{"version":709,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone8",{"version":711,"is_range":135,"range_type":662,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"9.0.0:milestone9",{"ecosystem":713,"name":714,"vendor":715,"product":716,"cpe_part":9,"purl_type":717,"purl_namespace":715,"purl_name":716,"source":9,"versions":718},"Maven","org.apache.tomcat:tomcat-coyote","org.apache.tomcat","tomcat-coyote","maven",[719,725],{"version":720,"is_range":661,"range_type":721,"version_start":722,"version_start_type":664,"version_end":723,"version_end_type":724,"fixed_in":9},"gte9_0_0_lt9_0_16","ecosystem","9.0.0","9.0.16","excluding",{"version":726,"is_range":661,"range_type":721,"version_start":727,"version_start_type":664,"version_end":728,"version_end_type":724,"fixed_in":9},"gte8_0_0_lt8_5_38","8.0.0","8.5.38",{"ecosystem":713,"name":730,"vendor":731,"product":732,"cpe_part":9,"purl_type":717,"purl_namespace":731,"purl_name":732,"source":9,"versions":733},"org.apache.tomcat.embed:tomcat-embed-core","org.apache.tomcat.embed","tomcat-embed-core",[734,735],{"version":720,"is_range":661,"range_type":721,"version_start":722,"version_start_type":664,"version_end":723,"version_end_type":724,"fixed_in":9},{"version":726,"is_range":661,"range_type":721,"version_start":727,"version_start_type":664,"version_end":728,"version_end_type":724,"fixed_in":9}]