Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat JBoss Enterprise Application Platform 8/neethi
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization
CVE-2026-42402 · GHSA-G36M-9G3M-2VMP
org.apache.neethi:neethi
Red Hat Fuse 7/neethi
Maven
Red Hat
High
Fix reported
2026-09-10
Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API
CVE-2026-42404 · GHSA-287C-FXR7-3W6C
org.apache.neethi:neethi
Red Hat Fuse 7/neethi
Maven
Red Hat
Medium
Fix reported
2026-09-10
Apache Neethi does not properly detect circular references in policy definitions.
CVE-2026-42403 · GHSA-2HFH-9H53-QC24
org.apache.neethi:neethi
Red Hat Fuse 7/neethi
Maven
Red Hat
High
Fix reported
2026-09-10
Apache Neethi: Apache Neethi: Denial of Service via crafted policies
CVE-2026-66143
Red Hat Fuse 7/neethi
Red Hat JBoss Enterprise Application Platform 7/neethi
Red Hat
High
No fix reported
Not recorded
org.apache.neethi/neethi: Apache Neethi: Denial of Service via uncontrolled recursion in WS-Policy document parsing
CVE-2026-91863
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents
CVE-2026-91864
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
org.apache.neethi/neethi: Apache Neethi: Denial of Service via crafted WS-Policy documents
CVE-2026-91865
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
Neethi: Neethi: Denial of Service via crafted WS-Policy documents
CVE-2026-91866
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk11-openshift-rhel8
Red Hat JBoss Enterprise Application Platform 7/jboss-eap-7/eap74-els-openjdk17-openshift-rhel8
Red Hat
High
No fix reported
Not recorded
