CLSA-2026-1790541916 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.18.3-tuxcare.1...

CLSA-2026-1790413013 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.2.3-tuxcare.2...

asf__cxf_CVE-2016-6812_3-0-11

¡Bienvenido a Apache CXF! Apache CXF es un framework de servicios de código abierto. CXF te ayuda a construir y desarrollar servicios utilizando APIs de programación frontend, como JAX-WS y JAX-RS. Estos servicios pueden hablar una variedad de protocolos como SOAP, XML/HTTP, HTTP RESTful o CORBA ...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a Denial of Service vulnerability in ws (CVE-2026-48779)

Summary A Denial of Service vulnerability in the ws WebSocket library CVE-2026-48779 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.21.1. Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is an open source WebSocket client and serve...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by an uninitialized memory disclosure vulnerability in ws (CVE-2026-45736)

Summary An uninitialized memory disclosure vulnerability in the ws WebSocket library CVE-2026-45736 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.21.1. Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket...

ROOT-APP-MAVEN-CVE-2026-40994 CVE-2026-40994 in org.springframework.ws:spring-ws-security - Patched by Root

Root has patched CVE-2026-40994 in the org.springframework.ws:spring-ws-security package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-40999 CVE-2026-40999 in org.springframework.ws:spring-ws-core - Patched by Root

Root has patched CVE-2026-40999 in the org.springframework.ws:spring-ws-core package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1790202672 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.5.0-tuxcare.2...

CLSA-2026-1790200934 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.11.0-tuxcare.2...

CVE-2026-91866

A flaw was found in Neethi. A remote attacker could exploit this vulnerability by providing specially crafted WS-Policy documents. This could force Neethi's policy-intersection to perform an exponential amount of work, leading to a denial of service DoS by consuming excessive CPU resources...

CVE-2026-91865

A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by providing a specially crafted WS-Policy document containing repeated policy references. This document would force Neethi to exponentially re-expand the same references during normalization, consuming excessiv...

CVE-2026-91864

A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by sending a specially crafted WS-Policy document. This document can contain unlimited content within a policy assertion, which Neethi processes without proper size limits. This can lead to memory exhaustion,...

CVE-2026-91863

A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by sending a specially crafted WS-Policy document containing deeply nested policy elements. This crafted document can bypass the parser's nesting-depth limit, leading to uncontrolled recursion that exhausts the...

CLSA-2026-1790174669 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.2.3-tuxcare.1...

CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...

CLSA-2026-1790164081 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.5.0-tuxcare.1...

CLSA-2026-1790161463 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.11.0-tuxcare.1...

CLSA-2026-1790161419 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 6.2.3-tuxcare.1...

PT-2026-97039

Name of the Vulnerable Software and Affected Versions SIPGO versions prior to 1.4.3 Description An unauthenticated WS or WSS peer can cause a denial of service in the server process. The issue occurs because WSConnection.Read in sip/transport ws.go creates a wsutil.Reader without setting...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the policy-intersection. An attacker can exhaust system resources and cause service disruption by submitting specially crafted WS-Policy documents that trigger excessive...