com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.restx:restx-server-tomcat (1.3.0-rc2) +63 more potentially affected by CVE-2026-41293 +1 more via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - net.sf.michael-o.tomcat:tomcat110-authnz-spnego-ad 4.3.0 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 -...

CVE-2026-86350

creationtimestamp| type| source ---|---|--- 2026-09-23 13:10:19+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mw6sub3gjz2d 2026-09-23 18:07:25+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mw7dhjmfrb2y 2026-09-23 23:20:04+00:00| seen|...

ai.astraform:remote-domain-template-java-spring (>=0.1.3, <=0.1.7), ai.timefold.solver:spring-boot-integration-test (>=1.34.0, <=1.35.0) +1187 more potentially affected by CVE-2026-86350 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.55, <=10.1.59)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.55, =0.1.3, =1.34.0, =chart-0.4.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.32.0, =4.35.0 and more Source cves: CVE-2026-86350 Source advisory:...

com.github.psi-probe:psi-probe-tomcat11 (5.4.0), io.restx:restx-server-tomcat (1.3.0-rc2) +63 more potentially affected by CVE-2026-86350 via org.apache.tomcat:tomcat-coyote (>=11.0.22, <=11.0.25)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.22, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.0.35, =1.1.0 - net.optionfactory:tomcat9-logging-error-report-valve 2.1 - net.sf.michael-o.tomcat:tomcat110-authnz-spnego-ad 4.3.0 - org.apache.meecrowave:meecrowave-arquillian 2.1.1 -...

CVE-2026-86350

Apache Tomcat is vulnerable to an HTTP Request/Response smuggling vulnerability caused by a regression in the fix for CVE-2026-41293 . This issue results in an inconsistent interpretation of HTTP/2 requests , which can trigger a request header mix-up . The vulnerability affects versions 11.0.22 t...