CVE-2026-74049 Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

Execution After Redirect EAR vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.26, from 10.1.0-M1 through 10.1.60, from 9.0.0.M1 through 9.0.122. The following versions were EOL at the time the CVE was created but are known to be affected: from 8.5.0...

CVE-2026-74049

Apache Tomcat is vulnerable to an Execution After Redirect (EAR) vulnerability (CWE-698) due to the Jasper JSTL plug-in implementation omitting the page abort (SKIP_PAGE) . This affects versions 11.0.0-M1 through 11.0.26 , 10.1.0-M1 through 10.1.60 , and 9.0.0.M1 through 9.0.122 . End-of-life ve...

tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

A flaw was found in Apache Tomcat. The application fails to halt execution after sending an HTTP redirect response, resulting in an Execution After Redirect EAR condition. A remote attacker could exploit this flaw by ignoring the redirect instruction to access responses generated after the...

tomcat: Apache Tomcat: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)

A flaw was found in Apache Tomcat. The application fails to halt execution after sending an HTTP redirect response, resulting in an Execution After Redirect EAR condition. A remote attacker could exploit this flaw by ignoring the redirect instruction to access responses generated after the...

Fixed in Apache Tomcat 10.1.61

Important: HTTP/2 request/response mix-up after error during async processing CVE-2026-101356 Incorrect object recycling and re-use affecting HTTP/2 processing of asynchronous servlets can trigger request and/or response mix-up between users. This was fixed with commit 6c7da608. This issue was...

jstl-api:ParserFuzzer: Security exception in java.base/java.lang.String.encodeWithEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=6619845610766336 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.lang.String.encodeWithEncoder...

jstl-api:ParserFuzzer: Security exception in ParserFuzzer

Detailed Report: https://oss-fuzz.com/testcase?key=5817500162392064 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: ParserFuzzer Sanitizer: address ASAN Recommended...

jstl-api:ParserFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=6368849193467904 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

jstl-api:ParserFuzzer: Security exception in java.base/jdk.internal.misc.Unsafe.allocateUninitializedArray

Detailed Report: https://oss-fuzz.com/testcase?key=4572215072129024 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

jstl-api:ParserFuzzer: Security exception in java.base/java.nio.ByteBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=5284965358370816 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.ByteBuffer.wrap...

jstl-api:ParserFuzzer: Security exception in java.base/sun.nio.cs.CESU_8.newEncoder

Detailed Report: https://oss-fuzz.com/testcase?key=5564758435954688 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/sun.nio.cs.CESU8.newEncoder...

jstl-api:ParserFuzzer: Security exception with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5746447418261504 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: NULL Sanitizer: address ASAN Recommended Security...

jstl-api:ParserFuzzer: Security exception in java.base/java.util.Arrays.copyOf

Detailed Report: https://oss-fuzz.com/testcase?key=6180775012990976 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.Arrays.copyOf...

jstl-api:ParserFuzzer: Security exception in java.base/java.util.HashMap.resize

Detailed Report: https://oss-fuzz.com/testcase?key=6102682273447936 Project: jstl-api Fuzzing Engine: libFuzzer Fuzz Target: ParserFuzzer Job Type: libfuzzerasanjstl-api Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.util.HashMap.resize...

Expression Language Injection

Expression Language EL has been defined as part of the Java Server Pages Standard Tag Library JSTL in order to offer developers a simple way to output data from an object model. Starting from the JSP 2.0 specification, Expression Language has been made available within JSP pages, but it is also...

CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl...

XXE in Apache Standard Taglibs

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

XML External Entity (XXE) Through An XSLT Extension

Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity XXE attacks via a crafted XSLT extension in a 1 or 2 JSTL XML tag...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.4.6 update on RHEL 7

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.4.6, fix several bugs, add various enhancements, and resolve one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A...

Important: Red Hat Security Advisory: jboss-ec2-eap security and enhancement update for EAP 6.4.6

Updated jboss-ec2-eap packages that add one enhancement and resolve one security issue are now available for Red Hat JBoss Enterprise Application Platform 6.4.6 on Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerabilit...