<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 22 Oct 2026 10:38:15 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-1358 — De multiples vulnérabilités ont été découvertes dans Apache Tomcat. Certaines d'entre elles permettent à un attaquant d…</title>
      <link>https://db.gcve.eu/vuln/certfr-2026-avi-1358</link>
      <description>certfr-2026-avi-1358</description>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/certfr-2026-avi-1358</guid>
    </item>
    <item>
      <title>fkie_cve-2026-103119</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-103119</link>
      <description>&lt;p&gt;Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 11.0.27, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 11.0.27, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-103119</guid>
    </item>
    <item>
      <title>GHSA-64hx-4gc9-f6v4</title>
      <link>https://db.gcve.eu/vuln/ghsa-64hx-4gc9-f6v4</link>
      <description>&lt;p&gt;Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 11.0.27, which fixes the issue.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response body being split between the current request and the next request received on that connection leading most likely to failure of the second request and possibly leakage of data from the first response to the second.&lt;/p&gt;
&lt;p&gt;This issue affects Apache Tomcat: from 11.0.0-M25 through 11.0.26.&lt;/p&gt;
&lt;p&gt;Users are recommended to upgrade to version 11.0.27, which fixes the issue.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-64hx-4gc9-f6v4</guid>
    </item>
    <item>
      <title>RHSA-2026:81365 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update</title>
      <link>https://db.gcve.eu/vuln/rhsa-2026:81365</link>
      <description>&lt;p&gt;tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure tomcat: Apache Tomcat: Jasper JSTL &amp;lt;c:redirect&amp;gt; plug-in implementation omits page abort (SKIP_PAGE) tomcat: tomcat: Unauthorized socket access via TOCTOU race condition tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup tomcat: Apache Tomcat: Possible TLS 1.3 connection failures tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure tomcat: Apache Tomcat: Jasper JSTL &amp;lt;c:redirect&amp;gt; plug-in implementation omits page abort (SKIP_PAGE) tomcat: tomcat: Unauthorized socket access via TOCTOU race condition tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanup tomcat: Apache Tomcat: Possible TLS 1.3 connection failures tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realm tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing tomcat: Apache Tomcat: Information disclosure via buffer under-read during non-blocking writes&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/rhsa-2026:81365</guid>
    </item>
  </channel>
</rss>
