CVE-2026-91863
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 21, 2026
Vendor
unknown
Description
A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of service). Users are recommended to upgrade to version 3.2.4, which fixes this issue.