advisory-database
advisory-database copied to clipboard
[GHSA-wm9w-rjj3-j356] Improper Handling of Exceptional Conditions, Uncontrolled...
Updates
- Affected products
- CWEs
- References
- Source code location
- Summary
Comments
Inspecting one of the fix commits shows that the affected component is under org.apache.coyote.http2 which per https://github.com/search?q=repo%3Aapache%2Ftomcat+apache.coyote.http2+path%3A%2F%5Eres%5C%2Fbnd%5C%2F%2F&type=code is distributed within the tomcat-coyote and tomcat-embed-core jars on maven