Skip to content

Known vulnerabilities in Apache Software Foundation Apache Portable Runtime Utility

Is your version affected?

CVE Summary Score Published
CVE-2025-49506 APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or… Not rated Aug 6, 2026
CVE-2026-32327 A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which… Not rated Aug 6, 2026
CVE-2026-34191 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable… Not rated Aug 6, 2026
CVE-2026-34501 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client Not rated Aug 6, 2026
CVE-2026-34502 Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache… Not rated Aug 6, 2026

Other Apache Software Foundation products