Apache Software Foundation

Everything Patch Gazette has reported about Apache Software Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Apache Traffic Server Patch Fixes Request Smuggling Flaw in Versions Up to 10.2.0

Apache releases updates for Traffic Server to stop an HTTP request smuggling issue that allows attackers to bypass front-end proxies and desynchronize responses.

Oct 21, 2026

Vulnerabilities

Apache fixes Tomcat JNDI flaw allowing password-free access in versions 7.0 through 11.0

Apache Software Foundation releases updates for Tomcat 9, 10, and 11 to fix a flaw allowing password-free access via JNDI realms.

Oct 20, 2026