Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-66143 1 Apache 1 Neethi 2026-07-27 7.5 High
It is possible to bypass the maximum number of normalized policy alternatives that was introduced in Apache Neethi 3.2.2 via certain crafted policies, which may lead to a denial of service attack via resource consumption. Users are recommended to upgrade to version 3.2.3, which fixes this issue.