← All credits

This issue was found using Claude agents to study the security of open-source projects and independently by Mike Read (github.com/Michael-JRead)

1 vulnerability record and advisories credit this contributor.

CVE-2026-107937
Apache CXF: The attachment header size and count limits can be bypassed, which allows denial of service through memory exhaustion.