update lucee express tomcat, currently 9.0.11

Description

Lucee Express bundles an old version of Tomcat, 9.0.11, latest is 9.0.31

TOMCAT CVE-2020-1938: Ghostcat
https://dev.lucee.org/t/tomcat-cve-2020-1938-ghostcat-ajp/6650

Environment

None

Activity

Zac Spitzer 5 March 2025 at 10:39

Pothys - MitrahSoft 8 January 2021 at 06:31

,Now, the current Apache tomcat stable version is 9.0.41.

Fixed

Details

Assignee

Reporter

Priority

Labels

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 23 February 2020 at 09:04
Updated 5 March 2025 at 11:34
Resolved 5 March 2025 at 11:34