Apache Tomcat versions from 8.5.0 through 8.5.100, 9.0.0.M1 through 9.0.105, 10.1.0-M1 through 10.1.41, and 11.0.0-M1 through 11.0.7 are affected by a denial of service (DoS) vulnerability related to resource allocation without limits or throttling during multipart uploads. This vulnerability can cause the server to exhaust resources, leading to service disruption. Fixed versions are 8.5.101 or later, 9.0.106 or later, 10.1.42 or later, and 11.0.8 or later.