CVE-2026-91866

Mô tả

Tham khảo

• lists.apache.org/thread/zbfxnomgvbmqchqjgc6lk5h0z76k3gh4 · Mailing List
• openwall.com/lists/oss-security/2026/09/18/13 · Mailing List

Lỗ hổng khác của neethi

• CVE-2026-91867TRUNG BÌNH 4.3When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slo…
• CVE-2026-91865CAO 7.5A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normaliza…
• CVE-2026-91864CAO 7.5A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without countin…
• CVE-2026-91863CAO 7.5A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread sta…
• CVE-2026-66144CAO 7.5Although remote policy references are not retrieved during policy normalization, if they are manually retrieved via the API it can cause a d…