oss-security·8d agoCVE-2026-91867: Apache Neethi: Remote policy fetch lacks a total timeout, allowing a slow server to hang the request indefinitely#apache-neethi#cve#denial-of-serviceCVE-2026-91867 5 sources