https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T16:39:38.146234+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-102497 fkie_cve-2026-102497 2026-09-30T16:39:38.179989+00:00

The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service.

Users are recommended to upgrade to version 2.3.3, which fixes this issue.

 https://db.gcve.eu/vuln/ghsa-9wgm-rwmh-4mcv GHSA-9wgm-rwmh-4mcv 2026-09-30T16:39:38.180087+00:00

The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, model groups or attribute groups. A malicious schema with such a cycle can make the walker recurse until the stack overflows, causing a denial of service.

Users are recommended to upgrade to version 2.3.3, which fixes this issue.