io.root.org.apache.activemq:activemq-client vulnerabilities (Root)

4 vulnerabilities.

• io.root.org.apache.activemq:activemq-client Root Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOM CVE-2026-39304 Fix available 7.5 HighApril 10, 2026
• io.root.org.apache.activemq:activemq-client Root Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath Directory CVE-2026-33227 Fix available 4.3 MediumApril 7, 2026
• io.root.org.apache.activemq:activemq-client Root Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation CVE-2025-27533 Public exploitFix available 6.9 MediumMay 7, 2025
• io.root.org.apache.activemq:activemq-client Root Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack CVE-2023-46604 In KEVPublic exploitFix available EPSS 100.0% 10.0 CriticalOctober 27, 2023