Parser crash via nesting-depth limit bypass

Denial of service in Apache Neethi before 3.2.4 allows attackers to crash the WS-Policy parser with a deeply nested policy document. The parser's nesting-depth check can be bypassed, so recursive processing continues until the thread stack is exhausted. Exploitation requires an embedding application to pass attacker-controlled WS-Policy input to Neethi, and the resulting parser crash interrupts that application's policy-processing thread.