CVE-2026-91864

概要

参考情報

• lists.apache.org/thread/400kbynbyhqhsjkv1yz251jm9wdz8z69 · Mailing List
• openwall.com/lists/oss-security/2026/09/18/11 · Mailing List

neethi のその他の脆弱性

• CVE-2026-91867中 4.3When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slo…
• CVE-2026-91866高 7.5A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU fo…
• CVE-2026-91865高 7.5A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normaliza…
• CVE-2026-91863高 7.5A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread sta…
• CVE-2026-66144高 7.5Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a d…