CVE-2026-91866

概要

参考情報

• lists.apache.org/thread/zbfxnomgvbmqchqjgc6lk5h0z76k3gh4 · Mailing List
• openwall.com/lists/oss-security/2026/09/18/13 · Mailing List

neethi のその他の脆弱性

• CVE-2026-91867中 4.3When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slo…
• CVE-2026-91865高 7.5A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normaliza…
• CVE-2026-91864高 7.5A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without countin…
• CVE-2026-91863高 7.5A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread sta…
• CVE-2026-66144高 7.5Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a d…