According to The Defiant, Apache has patched a critical vulnerability that allowed unauthenticated attackers to execute code on HTTP/2-enabled servers. The report summary notes that Apache credited the vulnerability discovery to Anthropic's OSS Scanner and two Google Cloud researchers. The material does not list the affected and fixed versions, and this report does not infer that all Apache servers are affected.