CVE-2026-76646: Apache MyFaces: Denial of Service via Unbounded Request Parsing

<p>Posted by Volodymyr Siedlecki on Sep 16</p>Severity: critical <br /> <br /> Affected versions:<br /> <br /> - Apache MyFaces 2.2.0 through 2.2.15<br /> - Apache MyFaces 2.3.0 through 2.3.11<br /> - Apache MyFaces 3.0.0 through 3.0.3<br /> - Apache MyFaces 4.0.0 through 4.0.3<br /> - Apache MyFaces 4.1.0 through 4.1.3<br /> - Apache MyFaces 2.3-next-*<br /> <br /> Description:<br /> <br /> A rem