Apache Software Foundation

Everything Sandbox Gazette has reported about Apache Software Foundation: 2 stories, newest first. Part of our Vulnerabilities coverage.

Does CVE-2026-111816's 9.3 Score Signal Critical Risk for Apache Traffic Server 8, 9, and 10?

A critical vulnerability in Apache Traffic Server allows cache poisoning via malformed 302 responses, affecting multiple major version branches.

Oct 22, 2026

An unauthenticated argument injection flaw in the experimental magick plugin for Apache Traffic Server receives a critical CVSS score of 10.0.

Oct 22, 2026