org.apache.directory.api:api-ldap-client-api vulnerabilities

CVEs whose affected-version data names the org.apache.directory.api:api-ldap-client-api package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103878None

today

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has…

Cleartext transmission of sensitive information vulnerability in Apache Directory LDAP API. A StartTLS extended operation started after a Search request has been sent can lead to receive data in plain text before the TLS Handshake has…

▾ SunlitApache Software Foundation · org.apache.directory.api:api-ldap-client-apivia NVD