You are viewing a plain text version of this content. The canonical link for it is here.
- Re: Possible regression after upgrade to [9.0.119] (java.lang.IllegalArgumentException: newPosition > limit: (8175 > 9)) - posted by Mark Thomas <ma...@apache.org> on 2026/07/01 08:54:30 UTC, 0 replies.
- Re: Tomcat 10.1.56: Extending RequestElement no longer works! - posted by Christopher Schultz <ch...@christopherschultz.net> on 2026/07/03 02:09:57 UTC, 1 replies.
- Re: Interesting issue while deploying an angular application (Tomcat 10.1.x) - posted by Christopher Schultz <ch...@christopherschultz.net> on 2026/07/03 02:14:30 UTC, 0 replies.
- Re: The scheme https s not consistent with the TLS enabled setting (Re: [ANN] Apache Tomcat 11.0.22 Available) - posted by Christopher Schultz <ch...@christopherschultz.net> on 2026/07/03 02:20:16 UTC, 1 replies.
- [ANN] Apache Tomcat 9.0.120 available - posted by Rémy Maucherat <re...@apache.org> on 2026/07/07 21:03:40 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.24 Available - posted by Mark Thomas <ma...@apache.org> on 2026/07/08 09:47:42 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.57 Available - posted by Christopher Schultz <sc...@apache.org> on 2026/07/10 13:55:26 UTC, 0 replies.
- Multiple Apache Tomcat Vulnerabilities Allow Attackers to Bypass Authentication - posted by Turritopsis Dohrnii Teo En Ming <te...@protonmail.com> on 2026/07/13 07:25:12 UTC, 1 replies.
- [SECURITY] CVE-2026-59083 Apache Tomcat - Incorrect URL decoding in RewriteValve may allow security control bypass - posted by Mark Thomas <ma...@apache.org> on 2026/07/14 08:08:22 UTC, 0 replies.
- [SECURITY] CVE-2026-59084 Apache Tomcat - EncryptInterceptor requirements not clearly documented - posted by Mark Thomas <ma...@apache.org> on 2026/07/14 08:08:31 UTC, 0 replies.
- Tomcat 10 MLDSA - failed to start - posted by John Mok <a9...@gmail.com> on 2026/07/14 11:40:59 UTC, 5 replies.
- jspwiki-wiki down?! - posted by Holger Klawitter <in...@klawitter.de> on 2026/07/15 07:02:43 UTC, 1 replies.
- Tomcat host header redirect issue - posted by Anushka sur <an...@gmail.com> on 2026/07/15 09:10:41 UTC, 17 replies.
- Apache Tomcat 9.1.x release timeframe - posted by Lisa Sayre <Li...@cygnalabs.com> on 2026/07/16 16:27:57 UTC, 12 replies.
- Possible missing CVE commits in 9.0.120, 10.1.57 and 11.0.24 release builds - posted by Thomas Williams <to...@herodevs.com> on 2026/07/16 19:00:21 UTC, 1 replies.
- Tomcat Jobs? - posted by Jon McAlexander <jo...@proton.me> on 2026/07/17 06:12:11 UTC, 3 replies.
- Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? - posted by LAURIA Giuseppe via users <us...@tomcat.apache.org> on 2026/07/21 16:17:47 UTC, 1 replies.
- AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? - posted by LAURIA Giuseppe via users <us...@tomcat.apache.org> on 2026/07/21 16:51:48 UTC, 6 replies.
- AW: [EXTERNAL] Re: AW: Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ? - posted by LAURIA Giuseppe via users <us...@tomcat.apache.org> on 2026/07/22 14:12:54 UTC, 0 replies.
- Re: [OT] Apache Tomcat 9.1.x release timeframe - posted by Christopher Schultz <ch...@christopherschultz.net> on 2026/07/22 20:05:52 UTC, 0 replies.
- London - Tues 28 July - evening - posted by Mark Thomas <ma...@apache.org> on 2026/07/23 14:08:19 UTC, 0 replies.
- [SECURITY] CVE-2026-66299 Apache Tomcat - DoS via WebSocket chat example - posted by Mark Thomas <ma...@apache.org> on 2026/07/28 14:26:56 UTC, 0 replies.
- Community over Code Glasgow 2026 - posted by Mark Thomas <ma...@apache.org> on 2026/07/31 07:34:23 UTC, 0 replies.
- Community over Code Sydney 2026 - posted by Mark Thomas <ma...@apache.org> on 2026/07/31 07:41:14 UTC, 0 replies.