AIKIDO-2026-10686
neethi is vulnerable to Uncontrolled Resource Consumption
75
High Risk
This Affects:
neethiTL;DR
Improper detection of circular policy references in Apache Neethi allows malicious WS-Policy documents to trigger infinite loops or excessive recursion during policy normalization. This can lead to a stack overflow or application hang, resulting in a denial of service (DoS) vulnerability. Version 3.2.2 introduces proper handling of circular references to prevent uncontrolled recursion.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
neethi is vulnerable to Uncontrolled Resource Consumption in versions 0.0.1 - 3.2.1.
How to fix this
Upgrade the org.apache.neethi:neethi library to the patch version.
Links
github.com/apache/ws-neethi/compare/neethi-3.2.1...neethi-3.2.2
lists.apache.org/thread/zm6t8skkkskjwk1881l4m4n0l7dqclzoopenwall.com/lists/oss-security/2026/05/01/7
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant