From 59028c03857de860f1159de476f622bfb25ba858 Mon Sep 17 00:00:00 2001
From: Lev Pachmanov <31389480+levpachmanov@users.noreply.github.com>
Date: Tue, 22 Sep 2026 15:13:13 +0300
Subject: [PATCH] Improve GHSA-mgp5-rv84-w37q

---
 .../GHSA-mgp5-rv84-w37q.json                  | 57 ++++++++++++++-----
 1 file changed, 42 insertions(+), 15 deletions(-)

diff --git a/advisories/github-reviewed/2026/02/GHSA-mgp5-rv84-w37q/GHSA-mgp5-rv84-w37q.json b/advisories/github-reviewed/2026/02/GHSA-mgp5-rv84-w37q/GHSA-mgp5-rv84-w37q.json
index 06084b4afd3b..0587fbcd20f7 100644
--- a/advisories/github-reviewed/2026/02/GHSA-mgp5-rv84-w37q/GHSA-mgp5-rv84-w37q.json
+++ b/advisories/github-reviewed/2026/02/GHSA-mgp5-rv84-w37q/GHSA-mgp5-rv84-w37q.json
@@ -18,17 +18,17 @@
     {
       "package": {
         "ecosystem": "Maven",
-        "name": "org.apache.tomcat:tomcat-coyote"
+        "name": "org.apache.tomcat:tomcat-coyote-ffm"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "11.0.0-M1"
+              "introduced": "9.0.93"
             },
             {
-              "fixed": "11.0.18"
+              "fixed": "9.0.115"
             }
           ]
         }
@@ -37,14 +37,14 @@
     {
       "package": {
         "ecosystem": "Maven",
-        "name": "org.apache.tomcat:tomcat-coyote"
+        "name": "org.apache.tomcat:tomcat-coyote-ffm"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "10.1.0-M7"
+              "introduced": "10.1.26"
             },
             {
               "fixed": "10.1.52"
@@ -56,17 +56,17 @@
     {
       "package": {
         "ecosystem": "Maven",
-        "name": "org.apache.tomcat:tomcat-coyote"
+        "name": "org.apache.tomcat:tomcat-coyote-ffm"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "9.0.83"
+              "introduced": "11.0.0-M22"
             },
             {
-              "fixed": "9.0.115"
+              "fixed": "11.0.18"
             }
           ]
         }
@@ -82,10 +82,10 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "11.0.0-M1"
+              "introduced": "10.1.23"
             },
             {
-              "fixed": "11.0.18"
+              "last_affected": "10.1.26"
             }
           ]
         }
@@ -101,10 +101,10 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "10.1.0-M7"
+              "introduced": "11.0.0-M20"
             },
             {
-              "fixed": "10.1.52"
+              "last_affected": "11.0.0-M22"
             }
           ]
         }
@@ -113,17 +113,36 @@
     {
       "package": {
         "ecosystem": "Maven",
-        "name": "org.apache.tomcat.embed:tomcat-embed-core"
+        "name": "org.apache.tomcat:tomcat-coyote"
       },
       "ranges": [
         {
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "9.0.83"
+              "introduced": "10.1.23"
             },
             {
-              "fixed": "9.0.115"
+              "last_affected": "10.1.25"
+            }
+          ]
+        }
+      ]
+    },
+    {
+      "package": {
+        "ecosystem": "Maven",
+        "name": "org.apache.tomcat:tomcat-coyote"
+      },
+      "ranges": [
+        {
+          "type": "ECOSYSTEM",
+          "events": [
+            {
+              "introduced": "11.0.0-M14"
+            },
+            {
+              "last_affected": "11.0.0-M21"
             }
           ]
         }
@@ -135,6 +154,14 @@
       "type": "ADVISORY",
       "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24734"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat-native/commit/69a977dd427ad2a6da0f10aca3872386ee27f681"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/tomcat/commit/e76e9eaa246f30debd603726d9147a8a8cb5171c"
+    },
     {
       "type": "PACKAGE",
       "url": "https://github.com/apache/tomcat"