CVE-2024-52317

CVE-2024-52317 : In Apache Tomcat, an incorrect object re-cycling and re-use vulnerability affects HTTP/2 requests. The root cause is improper recycling of request/response objects, which can lead to mixing of requests/responses between users. Affected versions include Tomcat 11.0.0-M23 to 11.0.0...

CVE-2026-34500

CVE-2026-34500 affects Apache Tomcat, where CLIENT_CERT authentication may bypass non-failing behavior in scenarios with soft fail disabled and FFM . Affected versions are: Tomcat 11.0.0-M14 through 11.0.20, 10.1.22 through 10.1.53, and 9.0.92 through 9.0.116. The issue is resolved by upgrading t...