You are viewing a plain text version of this content. The canonical link for it is here.
- [ANN] Apache Tomcat 11.0.22 Available - posted by Mark Thomas <ma...@apache.org> on 2026/05/05 14:49:31 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.118 available - posted by Rémy Maucherat <re...@apache.org> on 2026/05/11 06:51:53 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.55 Available - posted by Christopher Schultz <sc...@apache.org> on 2026/05/11 21:39:55 UTC, 0 replies.
- [SECURITY] CVE-2026-41284 Apache Tomcat - Unbounded read in WebDAV LOCK and PROPFIND handling - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:26 UTC, 0 replies.
- [SECURITY] CVE-2026-41293 Apache Tomcat - HTTP/2 request headers not validated - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:32 UTC, 0 replies.
- [SECURITY] CVE-2026-42498 Apache Tomcat - WebSocket authentication header exposure - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:37 UTC, 0 replies.
- [SECURITY] CVE-2026-43512 Apache Tomcat - Digest authenticator will authenticate any unknown user - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:42 UTC, 0 replies.
- [SECURITY] CVE-2026-43513 Apache Tomcat - LockOutRealm treats user names as case-sensitive - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:47 UTC, 0 replies.
- [SECURITY] CVE-2026-43514 Apache Tomcat - AJP secret compared in non-constant time - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:52 UTC, 0 replies.
- [SECURITY] CVE-2026-43515 Apache Tomcat - Security constraints not correctly applied - posted by Mark Thomas <ma...@apache.org> on 2026/05/12 15:06:57 UTC, 0 replies.