Vulnerabilities
Apache Pulsar Shadow Topic Auth Flaw CVE-2026-105937 Allows Cross-Tenant Data Access
An authorization gap in Apache Pulsar shadow topics lets users read data from other tenants and trigger unintended data deletion operations.
Apache Software Foundation
Everything SecOps Signal has reported about Apache Software Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Apache Tomcat HTTP/2 Async Patch Fixes CVE-2026-101356 Request Mix-Up
A vulnerability in Apache Tomcat allows mixed HTTP/2 requests between users during asynchronous processing. Affected versions require immediate upgrade to 11.0.27, 10.1.61 or 9.0.123.