Vulnerabilities
Check Apache Tomcat FIPS Configs for CVE-2026-74048 Startup Bypass
Apache Tomcat versions 9, 10, and 11 may start in non-FIPS mode if OpenSSL activation fails, posing a compliance risk for regulated environments.
oss-security
Everything Patch Review has reported about oss-security: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Patch Apache Cocoon or Retire It to Stop Cache Poisoning Flaw
A low-severity cache poisoning flaw affects all versions of the retired Apache Cocoon framework. No fix is planned, so teams must migrate or isolate affected systems.
Vulnerabilities
OSS-Security Adjusts Moderation Queue to Handle Disclosure Volume
The mailing list administrator delays approval of multi-message disclosures to prioritize single-message reports, addressing subscriber churn.