https://snyk.io/blog/ghostcat-breach-affects-all-tomcat-versions/
Ghostcat breach affects all Tomcat versions | Snyk
Feb 25, 2020 - The vulnerability was found in the Apache JServ Protocol (AJP). The issue is that this binary protocol allows an attacker to read or include any file into...
tomcat versionsghostcatbreachaffectssnyk
https://www.mail-archive.com/dev@tomcat.apache.org/msg191213.html
(tomcat) branch 9.0.x updated: Align trailer header name filtering across HTTP versions
https://www.mail-archive.com/dev@tomcat.apache.org/msg191210.html
(tomcat) branch 10.1.x updated: Align trailer header name filtering across HTTP versions