← All credits

This issue was found using Claude agents to study the security of open-source projects

9 vulnerability records and advisories credit this contributor.

CVE-2026-107938

Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.

CVE-2026-102497

Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker

CVE-2026-102496

Apache XMLSchema: Denial of service through deeply nested schema structures

CVE-2026-102495

Apache XMLSchema: Denial of service through unbounded recursion when resolving schema imports and includes

Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service

Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion

Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service

Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service

Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely