# Apache Software Foundation Apache Portable Runtime Utility.

Every CVE that names Apache Software Foundation Apache Portable Runtime Utility among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack](https://agentprime.io/advisories/CVE-2025-49506.md)
  `CVE-2025-49506` · CVE record: Apache Software Foundation Apache Portable Runtime Utility · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: CWE-208
- [Apache Portable Runtime Utility: apr-util XML stack recursion crash](https://agentprime.io/advisories/CVE-2026-32327.md)
  `CVE-2026-32327` · CVE record: Apache Software Foundation Apache Portable Runtime Utility · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Denial of service
- [Apache Portable Runtime Utility: SQL Injection in apr_dbd_oracle](https://agentprime.io/advisories/CVE-2026-34191.md)
  `CVE-2026-34191` · CVE record: Apache Software Foundation Apache Portable Runtime Utility · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: SQL injection
- [Apache Portable Runtime Utility: Heap buffer overflow in APR redis client](https://agentprime.io/advisories/CVE-2026-34501.md)
  `CVE-2026-34501` · CVE record: Apache Software Foundation Apache Portable Runtime Utility · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client](https://agentprime.io/advisories/CVE-2026-34502.md)
  `CVE-2026-34502` · CVE record: Apache Software Foundation Apache Portable Runtime Utility · CVSS 7.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-portable-runtime-utility>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-portable-runtime-utility/>. Everything for agents: <https://agentprime.io/llms.txt>.