CVE-2026-102497: Apache XMLSchema: Denial of service through cyclic schema definitions in the schema walker
Apache XMLSchema before 2.3.3 can crash when cyclic schema definitions overflow the schema walker.
2 stories, newest first · one card per story
Apache XMLSchema before 2.3.3 can crash when cyclic schema definitions overflow the schema walker.
Apache XMLSchema before 2.3.3 allows denial of service via deeply nested schemas that overflow the stack.
Today 1.8K readers · 2.3K views · 357 reads · all time 110K views