CVE-2026-66142 – Apache Neethi: Uncontrolled recursion in policy processing

CVE ID :CVE-2026-66142

Published : July 24, 2026, 1:18 p.m. | 31 minutes ago

Description :Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which may lead to a denial of service attack when parsing policies due to runtime memory exhaustion. Users are recommended to upgrade to version 3.2.3, which fixes this issue.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…