Vulnerabilities
Apache fixes Tomcat JNDI flaw allowing password-free access in versions 7.0 through 11.0
Apache Software Foundation releases updates for Tomcat 9, 10, and 11 to fix a flaw allowing password-free access via JNDI realms.
Apache Tomcat
Everything Patch Gazette has reported about Apache Tomcat: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Tomcat TLS 1.3 failures affect versions 9 through 11
Apache Tomcat releases advisory for incomplete cleanup causing intermittent TLS 1.3 connection failures across multiple supported branches.