VulertSecurity VulertSecurity

Vulnerability Database · Alpine · apache2 · Version

apache2 2.4.41-r0

2.4.41-r0 is affected by 18 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 0 Medium 0 Low 0 Unrated 18

All apache2 versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

apache2 2.4.41-r0 vulnerabilities

18 vulnerabilities cover apache2 2.4.41-r0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
Critical Vulnerability in Apache HTTP Server 2.4.64 - All RewriteCond expr Tests Evaluate as True N/A unrated 2.4.65-r0 23 Jul 2025
Critical Vulnerability in Apache2: Rewrite Condition Evaluation Flaw N/A unrated 2.4.65-r0 23 Jul 2025
Denial of Service Vulnerability in Apache HTTP Server (CVE-2025-49630) N/A unrated 2.4.64-r0 10 Jul 2025
Critical HTTP Desynchronisation Attack in Apache HTTP Server - CVE-2025-49812 N/A unrated 2.4.64-r0 10 Jul 2025
Memory Management Vulnerability in Apache HTTP Server: CVE-2025-53020 N/A unrated 2.4.64-r0 10 Jul 2025
Memory Management Vulnerability in Apache HTTP Server: Late Release of Memory N/A unrated 2.4.64-r0 10 Jul 2025
Critical HTTP Desynchronisation Attack in Apache HTTP Server - CVE-2025-49812 N/A unrated 2.4.64-r0 10 Jul 2025
Denial of Service Vulnerability in Apache HTTP Server - ALPINE-CVE-2025-49630 N/A unrated 2.4.64-r0 10 Jul 2025
Critical Log Injection Vulnerability in Apache HTTP Server 2.4.63 and Earlier N/A unrated 2.4.64-r0 10 Jul 2025
Access Control Bypass Vulnerability in Apache HTTP Server 2.4.35 to 2.4.63 N/A unrated 2.4.64-r0 10 Jul 2025
Server-Side Request Forgery (SSRF) Vulnerability in Apache HTTP Server - CVE-2024-43394 N/A unrated 2.4.64-r0 10 Jul 2025
Critical SSRF Vulnerability in Apache HTTP Server (Versions 2.4.0 to 2.4.63) N/A unrated 2.4.64-r0 10 Jul 2025
Apache HTTP Server 2.4.63 and Earlier: Insufficient Escaping Vulnerability in mod_ssl N/A unrated 2.4.64-r0 10 Jul 2025
Access Control Bypass in Apache HTTP Server 2.4.35 to 2.4.63 - Apache2 Package Vulnerability N/A unrated 2.4.64-r0 10 Jul 2025
SSRF Vulnerability in Apache HTTP Server (apache2) - Upgrade Required N/A unrated 2.4.64-r0 10 Jul 2025
Critical HTTP Response Splitting Vulnerability in Apache2 Package N/A unrated 2.4.64-r0 10 Jul 2025
Critical HTTP Response Splitting Vulnerability in Apache HTTP Server (CVE-2024-42516) N/A unrated 2.4.64-r0 10 Jul 2025
Critical SSRF Vulnerability in Apache HTTP Server (apache2) - CVE-2024-43204 N/A unrated 2.4.64-r0 10 Jul 2025

Looking for another version, or everything Vulert holds for apache2?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About apache2 2.4.41-r0

Is apache2 2.4.41-r0 vulnerable?

Yes. 18 vulnerabilities in the Vulert database cover apache2 2.4.41-r0: 0 critical, 0 high, 0 medium and 0 low, plus 18 not yet rated. Each entry above names the fixed version to move to.

How do I monitor apache2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the apache2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.