apache/ws-neethi Security Advisories | GitStock

medium2026-05-01

Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API

GHSA-287c-fxr7-3w6c · CVE-2026-42404

high2026-05-01

Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization

GHSA-g36m-9g3m-2vmp · CVE-2026-42402

high2026-05-01

Apache Neethi does not properly detect circular references in policy definitions.

GHSA-2hfh-9h53-qc24 · CVE-2026-42403