oss-sec mailing list archives From: Mark Thomas <markt () apache org> Date: Thu, 9 Apr 2026 20:46:58 +0100 Severity: low Affected versions: - Apache Tomcat 11.0.0-M1 through 11.0.18 - Apache Tomcat 10.1.0-M1 through 10.1.52 - Apache Tomcat 9.0.0.M1 through 9.0.115 - Apache Tomcat 8.5.0 through 8.5.100 - Apache Tomcat 7.0.0 through 7.0.109 - Apache Tomcat before 7.0.0 unknown - Apache Tomcat 8.0.0-RC1 through 8.0.53 unknown Description: Inconsistent Interpretation of HTTP Requests ('HTTP...