Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
java/org/apache/catalina/connector/Request.java: most-fixed (2 issues). Treat as high-risk during review.
9 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Arbitrary File Access: 1 historical fix(es) link java/org/apache/catalina/connector/Request.java to Arbitrary File Access.
Command Injection: 1 historical fix(es) link java/org/apache/catalina/servlets/CGIServlet.java to Command Injection.
Cross-Site Scripting: 1 historical fix(es) link java/org/apache/catalina/manager/HTMLManagerServlet.java, StatusTransformer.java to Cross-Site Scripting.
Last analyzed 30 Sep 2026, 02:50 UTC