Apache Software Foundation Apache Log4cxx

• CVE-2026-40023 Medium 6.3 Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters 0.5%
• CVE-2025-54812 Low 2.1 Apache Log4cxx: Improper HTML escaping in HTMLLayout 1.2%
• CVE-2025-54813 Medium 6.3 Apache Log4cxx: Improper escaping with JSONLayout 1.4%
• CVE-2023-31038 High 8.8 Apache Log4cxx: SQL injection when using ODBC appender 1.6%