# Apache Software Foundation Apache Neethi.

Every CVE that names Apache Software Foundation Apache Neethi among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely](https://agentprime.io/advisories/CVE-2026-91867.md)
  `CVE-2026-91867` · CVE record: Apache Software Foundation Apache Neethi · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service
- [Apache Neethi: Crafted policies cause unbounded work during intersection leading to denial of service](https://agentprime.io/advisories/CVE-2026-91866.md)
  `CVE-2026-91866` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service
- [Apache Neethi: Crafted policy references cause exponential expansion during normalization leading to denial of service](https://agentprime.io/advisories/CVE-2026-91865.md)
  `CVE-2026-91865` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service
- [Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion](https://agentprime.io/advisories/CVE-2026-91864.md)
  `CVE-2026-91864` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service
- [Apache Neethi: Uncontrolled recursion while parsing crafted WS-Policy documents allows denial of service](https://agentprime.io/advisories/CVE-2026-91863.md)
  `CVE-2026-91863` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 21 Sept 2026 · Tags: Denial of service
- [Apache Neethi: Remote PolicyReference fetch lacks resource bounds](https://agentprime.io/advisories/CVE-2026-66144.md)
  `CVE-2026-66144` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [Apache Neethi: Missing global alternative-output budget across policy computation paths](https://agentprime.io/advisories/CVE-2026-66143.md)
  `CVE-2026-66143` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service
- [Apache Neethi: Uncontrolled recursion in policy processing](https://agentprime.io/advisories/CVE-2026-66142.md)
  `CVE-2026-66142` · CVE record: Apache Software Foundation Apache Neethi · CVSS 7.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Denial of service

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-software-foundation-apache-neethi>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-software-foundation-apache-neethi/>. Everything for agents: <https://agentprime.io/llms.txt>.