Apache Software Foundation Apache Portable Runtime Utility

• CVE-2025-49506 High 7.5 Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack 0.4%
• CVE-2026-32327 Critical 9.1 Apache Portable Runtime Utility: apr-util XML stack recursion crash 0.5%
• CVE-2026-34191 Critical 9.1 Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle 0.6%
• CVE-2026-34501 High 7.5 Apache Portable Runtime Utility: Heap buffer overflow in APR redis client 0.5%
• CVE-2026-34502 High 7.5 Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client 0.5%