CVE-2026-66143

CVE-2026-66143 affects Apache Neethi (policy computation paths). The issue, described as a missing global alternative-output budget, allows bypassing the maximum number of normalized policy alternatives introduced in Neethi 3.2.2 via crafted policies, potentially causing a denial of service throu...