Re: AW: [EXTERNAL] Re: Why tomcat "Incorrect URL decoding in RewriteValve may allow security control bypass" is rated 'Low' on tomcat page but 'Critical' on NIST ?
Rémy Maucherat <[email protected]> Wed, 22 Jul 2026 14:05:14 +0200
| Newsgroups | gmane.comp.jakarta.tomcat.user |
|---|---|
| Message-ID | <CANwj8ZqK0_axiEfB5C5uG=kZFmbXaphBzeewxqfMXC2BqpvERw@mail.gmail.com> |
On Tue, Jul 21, 2026 at 9:05=E2=80=AFPM Mark Thomas <[email protected]> wrot= e: > As LLMs uncover more edge case bugs, this scenario is only going to > become more frequent. If it is causing you issues now, I'd strongly > recommend taking steps to address those issues sooner rather than later. I was going to write that, but you already did, so I can go back to being on vacation :) Thanks ! R=C3=A9my