Threats affecting pkg:maven/Apache Software Foundation/org.apache.ws.xmlschema:xmlschema-core

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-102496Apache XMLSchema · CWE-674 High7.5EPSS 0.5%2026-09-29CVE Database V5CVE-2026-102496 Apache XMLSchema versions prior to 2.3.3 contain a vulnerability where deeply nested schema structures can cause a stack overflow during parsing, leading to denial of service. This issue is fixed in version 2.3.3. EPSS 0.5%Vulnerability Apache Software Foundation CWE-674	CVE Database V5	2026-09-29
High	7.5	EPSS 0.5%	CVE-2026-102495Apache XMLSchema · CWE-674 High7.5EPSS 0.5%2026-09-29CVE Database V5CVE-2026-102495 Apache XMLSchema versions before 2.3.3 contain a vulnerability where schema imports and includes can be nested without limit, leading to stack overflow during parsing. This results in a denial of service condition. The issue is fixed in version 2.3.3. EPSS 0.5%Vulnerability Apache Software Foundation CWE-674	CVE Database V5	2026-09-29

Page 1 of 1