CVE-2026-91863

Mô tả

Tham khảo

• lists.apache.org/thread/72kxj71lvrqqx90xxqqctvpbw0t8mpxw · Mailing List
• openwall.com/lists/oss-security/2026/09/18/10 · Mailing List

Lỗ hổng khác của neethi

• CVE-2026-91867TRUNG BÌNH 4.3When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slo…
• CVE-2026-91866CAO 7.5A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU fo…
• CVE-2026-91865CAO 7.5A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normaliza…
• CVE-2026-91864CAO 7.5A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without countin…
• CVE-2026-66144CAO 7.5Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a d…