{"cves":["CVE-2025-52520","CVE-2025-48989","CVE-2025-52434","CVE-2025-48988","CVE-2025-48976","CVE-2025-49125","CVE-2025-53506"],"cvss":0.0,"database_specific":{"severity":"IMPORTANT"},"description":"[1:9.0.87-5.3]\n- Resolves:\n  tomcat: http/2 'MadeYouReset' DoS attack through HTTP/2 control frames (CVE-2025-48989)\n- Resolves:\n  tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)\n- Resolves:\n  tomcat: Dos in multipart upload (CVE-2025-48988)\n- Resolves:\n  tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-52434)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-52520)\n- Resolves:\n  tomcat: Denial of service (CVE-2025-53506)","id":"ELSA-2025-14178","ovalId":"oval:com.oracle.elsa:def:202514178","source":"oracle_linux","title":"ELSA-2025-14178:  tomcat9 security update (IMPORTANT)","url":"https://linux.oracle.com/errata/ELSA-2025-14178.html"}