You are viewing a plain text version of this content. The canonical link for it is here.
- Re: Tomcat host header redirect issue - posted by GUSTAVO AVITABILE <av...@unina.it> on 2026/08/02 06:42:39 UTC, 2 replies.
- Regarding apache-tomcat 10.1.58 version - posted by Roshan Patil <ro...@cdac.in> on 2026/08/05 07:09:44 UTC, 6 replies.
- Session clustering between tomcat versions. - posted by Stephen Booth <sb...@ed.ac.uk> on 2026/08/05 12:39:23 UTC, 1 replies.
- Tomcat 11.0.25 Release Timeline Inquiry - posted by "joao-paulo.martins-prestataire.ca-ps.com via users" <us...@tomcat.apache.org> on 2026/08/07 13:20:04 UTC, 4 replies.
- Re: Community over Code Sydney 2026 - posted by Mark Thomas <ma...@apache.org> on 2026/08/10 19:49:49 UTC, 0 replies.
- Status and timeline inquiry for Apache Tomcat 11.0.25 release - posted by Terry ST SY/DPO <ts...@digitalpolicy.gov.hk> on 2026/08/18 01:59:51 UTC, 1 replies.
- [ANN] Apache Tomcat 11.0.25 Available - posted by Mark Thomas <ma...@apache.org> on 2026/08/18 11:02:38 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.121 available - posted by Rémy Maucherat <re...@apache.org> on 2026/08/18 11:22:31 UTC, 0 replies.
- Tomcat Embed Core 10.1.58 - posted by Raghu Dev <ra...@gmail.com> on 2026/08/19 08:50:43 UTC, 5 replies.
- Update for new versions - posted by Venkumahanti Praveen <vp...@gmail.com> on 2026/08/20 05:52:10 UTC, 1 replies.
- Fwd: Version 10.1.57 / 10.1.59 - posted by Brian Proffitt <bk...@apache.org> on 2026/08/21 12:00:00 UTC, 2 replies.
- Support for gMSA - posted by "Lambert, Dominique via users" <us...@tomcat.apache.org> on 2026/08/25 12:17:44 UTC, 2 replies.
- [SECURITY] CVE-2026-65182 Apache Tomcat - Security constraint bypass - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:26 UTC, 0 replies.
- [SECURITY] CVE-2026-65183 Apache Tomcat - TOCTOU when setting specific permissions for Unix Domain Sockets - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:32 UTC, 0 replies.
- [SECURITY] CVE-2026-65637 Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:39 UTC, 0 replies.
- [SECURITY] CVE-2026-65905 Apache Tomcat - Limited replay attack possible with DIGEST authentication - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:45 UTC, 0 replies.
- [SECURITY] CVE-2026-65927 Apache Tomcat - RewriteValve [N] restarts at the second rule and may bypass access control - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:50 UTC, 0 replies.
- [SECURITY] CVE-2026-66422 Apache Tomcat - Servlet role references can bypass declarative role constraints - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:55 UTC, 0 replies.
- [SECURITY] CVE-2026-68525 Apache Tomcat - Redirect after FORM authentication may bypass method specific constraints - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:32:59 UTC, 0 replies.
- [SECURITY] CVE-2026-68569 Apache Tomcat - Principal lookup can fail open in some cases - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:33:04 UTC, 0 replies.
- [SECURITY] CVE-2026-68763 Apache Tomcat - DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:33:08 UTC, 0 replies.
- [SECURITY] CVE-2026-73180 Apache Tomcat - Authenticated WebSocket session survives end of HTTP session - posted by Mark Thomas <ma...@apache.org> on 2026/08/25 21:33:13 UTC, 0 replies.
- Tomcat Severity Ratings verus CVSS - posted by Darryl Baker <da...@northwestern.edu> on 2026/08/26 20:14:24 UTC, 3 replies.