CVE-2026-42498

Apache Tomcat contains an information disclosure vulnerability where the HTTP Authentication Header is exposed to unexpected hosts during WebSocket authentication . This issue affects several versions, including 11.0.0-M1 through 11.0.21 , 10.1.0-M1 through 10.1.54 , 9.0.2 through 9.0.117 , 8.5.2...