High severity7.5NVD Advisory· Published Sep 21, 2026· Updated Sep 24, 2026
CVE-2026-91863
CVE-2026-91863
Description
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of service). Users are recommended to upgrade to version 3.2.4, which fixes this issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
2- www.openwall.com/lists/oss-security/2026/09/18/10nvdMailing ListThird Party Advisory
- lists.apache.org/thread/72kxj71lvrqqx90xxqqctvpbw0t8mpxwnvdMailing ListVendor Advisory
News mentions
0No linked articles in our index yet.