Aller au contenu
en Se connecter
Non notée

CVE-2026-102495 Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make…

Description

Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache XMLSchema 2.3 premières → < 2.3.3 2.3.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache XMLSchema

Les 3 CVE de Apache XMLSchema →
CVE-2026-102497 The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model… Non notée CVE-2026-102496 Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a… Non notée
Suivre cette CVE