Apache Tomcat security advisory (AV25-239)

Serial number: AV25-239
Date: April 29, 2025

On April 28, 2025, Apache published security advisories to address vulnerabilities in the following products:

• Apache Tomcat – versions 11.0.0-M1 to 11.0.5
• Apache Tomcat – versions 10.1.0-M1 to 10.1.39
• Apache Tomcat – versions 9.0.0.M1 to 9.0.102

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Apache Tomcat - 9.0.104
• Apache Tomcat - 10.1.40
• Apache Tomcat - 11.0.6