Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-09-29T11:34:04 org.apache.ws.xmlschema/xmlschema-core: Apache XMLSchema: Denial of Service (DoS) via deeply nested schema structures 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CWE-770

Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so a malicious schema can make parsing recurse until the stack overflows. This causes a denial of service. Users are recommended to upgrade to version 2.3.3, which fixes this issue.

A flaw was found in Apache XMLSchema. When constructing its schema model, the parser does not restrict how deeply schema structures can be nested. A remote attacker could exploit this vulnerability by providing a crafted XML schema containing deeply nested elements, triggering uncontrolled recursion and a stack overflow that crashes the application, resulting in a Denial of Service (DoS).

This vulnerability is rated as Important severity because an unauthenticated remote attacker can cause a denial of service by supplying an excessively nested schema definition, leading to JVM stack exhaustion without requiring special privileges. In typical Red Hat deployments such as JBoss EAP and Red Hat build of Apache Camel, applications exposing web services or endpoints that process untrusted XML schemas can be crashed or rendered unavailable. Exploitation solely affects availability, with no impact to system integrity or confidentiality. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat build of Apache Camel 4 for Quarkus 3 Affected xmlschema-core Red Hat build of Apache Camel for Spring Boot 4 Affected xmlschema-core Red Hat Fuse 7 Not affected xmlschema-core Red Hat JBoss Enterprise Application Platform 7 Will not fix jboss-eap-7/eap74-els-openjdk11-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7 Will not fix jboss-eap-7/eap74-els-openjdk17-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7 Will not fix jboss-eap-7/eap74-els-openjdk8-openshift-rhel8 Red Hat JBoss Enterprise Application Platform 7 Will not fix xmlschema-core Red Hat JBoss Enterprise Application Platform 8 Affected xmlschema-core Red Hat JBoss Enterprise Application Platform Expansion Pack Not affected xmlschema-core Red Hat OpenShift AI (RHOAI) Affected rhoai/odh-spark-operator-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cpu-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch210-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-cuda130-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th06-rocm64-torch291-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th-torch-cpu-py312-rhel9 Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-th-torch-cuda-py312-rhel9 Red Hat Single Sign-On 7 Will not fix xmlschema-core https://www.cve.org/CVERecord?id=CVE-2026-102496 https://nvd.nist.gov/vuln/detail/CVE-2026-102496 https://lists.apache.org/thread/9z1vg8wmvwpfw748fb2nb55w4hgbnxol