CVE-2026-103880

A flaw was found in Apache Directory LDAP API. This vulnerability allows an attacker to cause a Denial of Service DoS by storing or verifying passwords hashed with an excessively high bcrypt work factor. Because the library fails to enforce an upper bound on computational cost during password...