CVE-2026-91863

概要

参考情報

• lists.apache.org/thread/72kxj71lvrqqx90xxqqctvpbw0t8mpxw · Mailing List
• openwall.com/lists/oss-security/2026/09/18/10 · Mailing List

neethi のその他の脆弱性

• CVE-2026-91867中 4.3When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slo…
• CVE-2026-91866高 7.5A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU fo…
• CVE-2026-91865高 7.5A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normaliza…
• CVE-2026-91864高 7.5A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without countin…
• CVE-2026-66144高 7.5Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a d…