Tuomo Hänninen

**Name of the Vulnerable Software and Affected Versions** Apache Tomcat versions 11.0.0-M25 through 11.0.26 **Description** A buffer under-read occurs in the HTTP/1.1 non-blocking write path. This issue allows a large response body to be split between the current request and the subsequent request received on the same keep-alive connection. This typically results in the failure of the second request and may lead to the leakage of data from the first response into the second. **Recommendations** Upgrade to version 11.0.27.