org.apache.activemq:activemq-web vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.activemq:activemq-web Maven Apache ActiveMQ, Apache ActiveMQ Web: HTTP Response Header Injection via JMS Message Properties CVE-2026-42253 Fix available 6.1 MediumJune 1, 2026
• org.apache.activemq:activemq-web Maven Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory CVE-2026-33227 Fix available 4.3 MediumApril 7, 2026