CVE-2026-101356

Apache Tomcat versions 11.0.22 through 11.0.26 , 10.1.55 through 10.1.60 , and 9.0.118 through 9.0.122 are vulnerable to an incorrect object recycling and re-use issue. When processing asynchronous servlets over HTTP/2 , an error can trigger a request and/or response mix-up between different user...