Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ?

"Sebastian Trost via users" <[email protected]> Tue, 21 Jul 2026 20:11:47 +0200

Newsgroups	gmane.comp.jakarta.tomcat.user
Message-ID	<[email protected]>

Giuseppe,

On 7/21/26 18:51, LAURIA Giuseppe via users wrote:
> And I assume that this will not get any better in the future, but that such cases are still often discovered which do not concern us.
>
> Couldn’t there be something better from the Tomcat corner?
Since this is an open source project I'm sure that suggestions are 
always welcome.

Sebastian