log4cxx vulnerabilities (Debian)

4 vulnerabilities.

• log4cxx Debian Apache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden characters CVE-2026-40023 Fix available 6.3 MediumApril 10, 2026
• log4cxx Debian Apache Log4cxx: Improper HTML escaping in HTMLLayout CVE-2025-54812 Fix available 2.1 LowAugust 22, 2025
• log4cxx Debian Apache Log4cxx: Improper escaping with JSONLayout CVE-2025-54813 Fix available 6.3 MediumAugust 22, 2025
• log4cxx Debian Apache Log4cxx: SQL injection when using ODBC appender CVE-2023-31038 Fix available 8.8 HighMay 8, 2023