Apache Software Foundation Apache Neethi

• CVE-2026-91867 Medium 4.3 Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely 0.5%
• CVE-2026-91866 High 7.5 Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service 0.7%
• CVE-2026-91865 High 7.5 Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service 0.7%
• CVE-2026-91864 High 7.5 Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion 0.7%
• CVE-2026-91863 High 7.5 Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service 0.8%
• CVE-2026-66144 High 7.5 Apache Neethi: Remote PolicyReference fetch lacks resource bounds 0.7%
• CVE-2026-66143 High 7.5 Apache Neethi: Missing global alternative-output budget across policy computation paths 0.9%
• CVE-2026-66142 High 7.5 Apache Neethi: Uncontrolled recursion in policy processing 0.7%
• CVE-2026-42404 Medium 6.5 Apache Neethi: Unrestricted HTTP Redirect Following in Policy References 0.5%
• CVE-2026-42402 High 7.5 Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS 0.7%
• CVE-2026-42403 High 7.5 Apache Neethi: Circular Policy Reference Infinite Loop 0.8%