Apache Software Foundation

Everything NetSec Tribune has reported about Apache Software Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.

Apache Tomcat 11.0.27 Fixes Critical Cross-Request Data Leak in Versions 11.0.0-M25 Through 11.0.26

A critical flaw in Apache Tomcat 11 could leak response data across requests on the same connection, prompting an urgent upgrade to version 11.0.27.

Oct 20, 2026

An unvalidated configuration value in older CouchDB versions allows administrators to execute arbitrary shell commands on the host system.

Oct 20, 2026