Apache Software Foundation Directory vulnerabilities

• apache software foundation directory ldap api Apache Directory LDAP API: Denial of service via crafted telephone number values CVE-2026-103885 7.5 HighOctober 2, 2026
• apache software foundation directory ldap api Apache Directory LDAP API: Unsafe loading of Java code from LDAP schema elements CVE-2026-103877 9.8 CriticalOctober 2, 2026
• apache software foundation directory ldap api Apache Directory LDAP API: Denial of service via excessive bcrypt cost factor in stored passwords CVE-2026-103880 7.5 HighOctober 2, 2026
• apache software foundation directory ldap api Apache Directory LDAP API: Injection of plaintext responses during StartTLS CVE-2026-103878 7.5 HighOctober 2, 2026
• apache software foundation directory ldap api Apache Directory LDAP API: A unbound client can send a deeply nested search filter that overflows the stack in the server's decoder CVE-2026-103552 7.3 HighOctober 2, 2026
• apache software foundation directory ldap api Apache Directory LDAP API: Denial of service via excessive memory allocation in BER decode CVE-2026-102731 7.5 HighOctober 2, 2026
• apache directory ldap api Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname CVE-2026-35563 Fix available 8.8 HighJune 1, 2026
• apache directory studio StartTLS and SASL confidentiality protection bypass CVE-2021-33900 Fix available 7.5 HighJuly 26, 2021
• apache directory ldap api, apache software foundation directory +1 more Credential leak in org.apache.directory.api:apache-ldap-api CVE-2018-1337 Fix available 9.8 CriticalJuly 10, 2018