Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-91863 1 Apache 1 Neethi 2026-09-21 N/A
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of service). Users are recommended to upgrade to version 3.2.4, which fixes this issue.