The Apache Software Foundation

Apache Directory LDAP API: Denial of service via crafted telephone number values

Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords

Apache Directory LDAP API: Injection of plaintext responses during StartTLS

Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements

Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder

Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode

Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms

Apache Sling XSS: Improper escaping in the XSS Webconsole plugin

Apache Sling XSS: Missing parser resource limits

Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource