The Apache Software Foundation

Apache log4net: Unencodable content discards a whole SmtpPickupDirAppender batch

Apache log4net: NUL character truncates EventLogAppender records

Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS

Apache Directory LDAP API: Injection of plaintext responses during StartTLS

Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode

Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder

Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

Apache Sling XSS: Missing parser resource limits