Neethi
Apache · 6 CVEs
CVE-2026-66144
HIGH
Apache Neethi: Remote PolicyReference fetch lacks resource bounds
Jul 24, 2026
CVE-2026-66143
HIGH
Apache Neethi: Missing global alternative-output budget across policy computation paths
Jul 24, 2026
CVE-2026-66142
HIGH
Apache Neethi: Uncontrolled recursion in policy processing
Jul 24, 2026
CVE-2026-42404
HIGH
Apache Neethi: Unrestricted HTTP Redirect Following in Policy References
May 1, 2026
CVE-2026-42402
HIGH
Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS
May 1, 2026
CVE-2026-42403
HIGH
Apache Neethi: Circular Policy Reference Infinite Loop
May 1, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-66144 | Apache Neethi: Remote PolicyReference fetch lacks resource bounds | HIGH | 0.74% | Jul 24, 2026 |
| CVE-2026-66143 | Apache Neethi: Missing global alternative-output budget across policy computation paths | HIGH | 0.85% | Jul 24, 2026 |
| CVE-2026-66142 | Apache Neethi: Uncontrolled recursion in policy processing | HIGH | 0.74% | Jul 24, 2026 |
| CVE-2026-42404 | Apache Neethi: Unrestricted HTTP Redirect Following in Policy References | HIGH | 0.58% | May 1, 2026 |
| CVE-2026-42402 | Apache Neethi: Policy Normalization Unbounded Resource Allocation DoS | HIGH | 0.74% | May 1, 2026 |
| CVE-2026-42403 | Apache Neethi: Circular Policy Reference Infinite Loop | HIGH | 0.80% | May 1, 2026 |
Showing 1 to 6 of 6 CVEs