Clik here to view.
Apache TomEE MicroProfile 5.0 certified
Last year, we announced Apache TomEE as a certified Jakarta EE 9.1 server (See blog post). The season favors gifts and good news, so I thought I would write this small blog to talk about our journey to...
View ArticleClik here to view.
Java and the Open Source ecosystem security
Security in the Open Source ecosystem has continuously grown in priority on the global agenda in the technology industry. Many practices like DevOps, Agile, and standards like ISO/IEC 27001 have...
View ArticleClik here to view.
Demystifying Default Resources in Apache TomEE
The Problem One of the design philosophies of Apache TomEE is to adapt the server to fit the user, rather than the other way around. It can be incredibly frustrating to develop your application and...
View ArticleSecuring Your Business: A Guide to Understanding and Addressing Apache...
In today’s digital landscape, businesses and companies encounter a continuous stream of cybersecurity threats, and one such significant threat is Common Vulnerabilities and Exposures (CVEs). These...
View ArticleClik here to view.
How to manage CVEs in Open Source Software?
Reducing time, cost, and overall overhead generated by addressing Common Vulnerability Exposures in your software supply chain can be a constant challenge if the organization’s stakeholders aren’t...
View ArticleMoving from javax to jakarta namespace
This blog aims at giving some pointers in order to address the challenge related to the switch from `javax` to `jakarta` namespace. This is one of the biggest changes in Java of the latest 20 years. No...
View ArticleAct Now: Protecting Your ActiveMQ Broker from CVE-2023-46604
Dive into CVE-2023-46604 You may be aware that a new critical vulnerability has been discovered in ActiveMQ. This was publicly disclosed on Friday 27th October. The details of the CVE are as follows...
View ArticleProtect Your Tomcat & TomEE: Insights into CVE-2024-50379 & CVE-2024-56337...
Overview of CVE-2024-50379 and CVE-2024-56337 in Tomcat and TomEE You may have noticed a couple of new CVEs in Tomcat recently – CVE-2024-50379 and CVE-2024-56337. This vulnerability is rated as...
View ArticleThe Hidden Risk of Running End-of-Life Apache Tomcat, TomEE, and ActiveMQ
Understanding End-of-Life (EOL) Products If you’re a developer or manager, you’ve likely faced the challenge of maintaining legacy systems. You know the delicate balance between keeping your software...
View ArticleClik here to view.
Apache Tomcat CVE-2025-31650: The “Tomcat Killer” HTTP/2 Vulnerability
Apache Tomcat CVE-2025-31650: The “Tomcat Killer” HTTP/2 Vulnerability A newly published proof-of-concept (PoC) exploit for Apache Tomcat CVE-2025-31650 has transformed a previously known Apache Tomcat...
View Article
