CVE-2009-1955

CVE-2009-1955 affects the Expact XML parser used by the apr_xml_* interface in xml/apr_xml.c of APR-util, with the vulnerability present in APR-util prior to 1.3.7. In Apache HTTP Server deployments that enable mod_dav and mod_dav_svn, a crafted XML document containing a large number of nested en...

CVE-2026-32327

CVE-2026-32327 concerns the APR-util library. The connected sources confirm a vulnerability in version 1.6.3 and earlier where a stack recursion flaw can be triggered by XML parsing from untrusted sources via the apr_xml_quote_elem() function, potentially causing a crash. The issue affects APR-ut...