Known Vulnerabilities for Apr-util by Apache
Listed below are 6 of the newest known vulnerabilities associated with "Apr-util" by "Apache".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-59854 json | SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacke... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-59803 json | rpcx through 1.9.3, fixed in commit 047aec1, contains a denial-of-service vulnerability in protocol.Message.Decode (protocol/... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-58449 json | txtai through 9.10.0, fixed in commit 11b32da, exposes an API /reindex endpoint whose function body parameter is resolved thr... | Not Provided | 2026-06-30 | 2026-07-01 |
| CVE-2026-56663 json | AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. Pr... | Not Provided | 2026-06-26 | 2026-06-26 |
| CVE-2026-54917 json | SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables. Prior to 4.30, the S3 AP... | Not Provided | 2026-06-25 | 2026-06-25 |
| CVE-2026-54512 json | jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-53609 json | ApostropheCMS is an open-source Node.js content management system. In versions up to and including 4.30.0, `apos.util.set()` ... | Not Provided | 2026-06-12 | 2026-06-15 |
| CVE-2026-49143 json | BrowserStack Runner through 0.9.5 contains a remote code execution vulnerability in the /_log HTTP handler that allows unauth... | Not Provided | 2026-06-02 | 2026-06-03 |
| CVE-2026-47209 json | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, the BaseHandler.set trap in bridge.js (line 1231) igno... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-47135 json | vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.4, Symbol.for override in setup-sandbox.js only intercept... | Not Provided | 2026-06-12 | 2026-06-12 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Apache | Apr-util | 1.4.4 | |||
| Application | Apache | Apr-util | 1.4.3 | |||
| Application | Apache | Apr-util | 1.3.9 | |||
| Application | Apache | Apr-util | 1.3.8 | |||
| Application | Apache | Apr-util | 1.3.7 | |||
| Application | Apache | Apr-util | 1.3.6 | |||
| Application | Apache | Apr-util | 1.3.5 | |||
| Application | Apache | Apr-util | 1.3.4 | |||
| Application | Apache | Apr-util | 1.3.3 | |||
| Application | Apache | Apr-util | 1.3.2 | |||
| Application | Apache | Apr-util | 1.3.10 | |||
| Application | Apache | Apr-util | 1.3.1 | |||
| Application | Apache | Apr-util | 1.3.0 | |||
| Application | Apache | Apr-util | 1.2.9 | |||
| Application | Apache | Apr-util | 1.2.8 | |||
| Application | Apache | Apr-util | 1.2.7 | |||
| Application | Apache | Apr-util | 1.2.6 | |||
| Application | Apache | Apr-util | 1.2.2 | |||
| Application | Apache | Apr-util | 1.2.13 | |||
| Application | Apache | Apr-util | 1.2.12 |