CVE-2026-89295

In Eclipse Mnestix AAS Generator versions 0.1.0 up until but excluding 1.5.0, a practical upper bound on the client-supplied count parameter of the GET /api/v1/IdGenerator/submodelIds/count and GET /api/v2/IdGenerator/submodelIds/count endpoints is not enforced. The service generates and retains...