Apache

25 Articles

Log4j Deserialization Bypass Is Real but Not Log4Shell

A security researcher using the handle U-Sec (Wujie Security) published details of a deserialization filter bypass in Apache Log4j 2, reporting that…

Apache —— May 6, 2026 3 min read

A memory management flaw buried inside Apache HTTP Server’s HTTP/2 module is giving attackers two options:…

Apache —— Apr 24, 2026 2 min read

A quiet but consequential change is coming to internet security infrastructure — and unlike most breaking…

Apache —— Apr 14, 2026 3 min read

Sometimes the cure is worse than the disease. That is precisely what happened when Apache’s developers…

Apache —— Apr 29, 2025 2 min read

The Apache Software Foundation has released important security updates addressing two vulnerabilities in Apache Tomcat, the…

Apache —— Mar 11, 2025 2 min read

A recently disclosed vulnerability in Apache Camel (CVE-2025-27636) has been officially classified as moderate severity, despite…

Apache —— Mar 11, 2025 2 min read

A serious security vulnerability has been identified in Apache Tomcat, potentially exposing servers to remote code…

Apache —— Dec 23, 2024 2 min read

The Apache Software Foundation has issued an urgent security advisory regarding a critical remote code execution…

Apache —— Dec 12, 2023 2 min read

Apache has disclosed a critical remote code execution (RCE) vulnerability, tracked as CVE-2023-50164, affecting multiple versions…

Apache —— Oct 18, 2022 3 min read

Apache Software Foundation (ASF) has released a fix for a critical-severity vulnerability in the Apache Commons…