CVE-2026-40023 Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters

[
  {
    "cpes": [
      "cpe:2.3:a:apache:log4cxx:*:*:*:*:*:*:*:*"
    ],
    "defaultStatus": "unaffected",
    "product": "Apache Log4cxx",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://conan.io/center",
    "defaultStatus": "unaffected",
    "packageName": "log4cxx",
    "packageURL": "pkg:conan/log4cxx",
    "product": "Apache Log4cxx (Conan)",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "collectionURL": "https://brew.sh/",
    "defaultStatus": "unaffected",
    "packageName": "log4cxx",
    "product": "Apache Log4cxx (Brew)",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "1.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]