https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T16:10:48.215866+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-120367 CVE-2026-120367 — Apache Axis2/Java: unbounded JSON request body buffering 2026-11-09T16:10:48.231962+00:00

Affected: Apache Software Foundation Apache Axis2/Java

Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including the Gson, Moshi and HTTP/2 variants, buffered the entire request body with no size limit, so an unauthenticated caller could exhaust server memory with a large JSON request. Version 2.0.2 bounds JSON request bodies with the configurable jsonMaxRequestSize parameter. This issue affects Apache Axis2/Java: through 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.