CVE-2026-66144

CVE-2026-66144 concerns Apache Neethi: remote PolicyReference fetch lacks resource bounds during policy normalization. If a policy is retrieved in full via the API, a large policy can trigger a denial of service. The issue is mitigated by upgrading to version 3.2.3, which enforces a default maxim...