News · via oss-security
CVE-2026-78384: Apache CXF: Unbounded DEFLATE Decompression in CXF JOSE/JWE and SAML Processing (Decompression Bomb)
Posted by Colm O hEigeartaigh on Oct 09 Severity: moderate Affected versions: - Apache CXF (org.apache.cxf:cxf-core) 4.2.0 before 4.2.4 - Apache CXF (org.apache.cxf:cxf-core) 4.0.0 before 4.1.9 -…