Threats Tagged 'ghsa-5x6j-m6jc-q2r5'

1 threat

Threats Tagged 'ghsa-5x6j-m6jc-q2r5'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-85532Apache WSS4J · Improper input validation High7.5EPSS 0.5%2026-09-30CVE Database V5CVE-2026-85532 Apache WSS4J versions prior to 4.0.2, 3.0.6, and 2.4.4 improperly validate attacker-controlled derived-key lengths and offsets. This flaw allows the use of cryptographically weak keys or causes excessive CPU and memory consumption when processing crafted WS-Security messages. The issue is fixed by enforcing minimum and maximum key lengths and offset limits. Users should upgrade to fixed versions to mitigate the risk. EPSS 0.5%Vulnerability Apache Software Foundation #cwe-20 #ghsa-5x6j-m6jc-q2r5	CVE Database V5	2026-09-30

Showing 1–1 of 1 result