Apache Software Foundation Neethi vulnerabilities

• apache neethi Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely CVE-2026-91867 4.3 MediumSeptember 21, 2026
• apache neethi Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service CVE-2026-91866 7.5 HighSeptember 21, 2026
• apache neethi Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service CVE-2026-91865 7.5 HighSeptember 21, 2026
• apache neethi Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion CVE-2026-91864 7.5 HighSeptember 21, 2026
• apache neethi Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service CVE-2026-91863 7.5 HighSeptember 21, 2026
• apache neethi Apache Neethi: Remote PolicyReference fetch lacks resource bounds CVE-2026-66144 7.5 HighJuly 24, 2026
• apache neethi Apache Neethi: Missing global alternative-output budget across policy computation paths CVE-2026-66143 7.5 HighJuly 24, 2026
• apache neethi Apache Neethi: Uncontrolled recursion in policy processing CVE-2026-66142 7.5 HighJuly 24, 2026
• apache neethi Apache Neethi: Unrestricted HTTP Redirect Following in Policy References CVE-2026-42404 Fix available 6.5 MediumMay 1, 2026
• apache neethi Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS CVE-2026-42402 Fix available 7.5 HighMay 1, 2026
• apache neethi Apache Neethi: Circular Policy Reference Infinite Loop CVE-2026-42403 Fix available 7.5 HighMay 1, 2026