Skip to content
Apache Software Foundation Qpid Proton vulnerabilities
-
apache software foundation qpid proton c
Apache Qpid Proton C: Verifying non compliant TLS wildcard cert can cause stack buffer overflow read
CVE-2026-115942
7.5 High
-
apache software foundation qpid proton c
Apache Qpid Proton C: Potential authentication bypass: regular AMQP frames can be sent as SASL frames
CVE-2026-114230
9.8 Critical
-
apache software foundation qpid proton c
Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash
CVE-2026-105042
9.8 Critical
-
apache software foundation qpid proton c
Apache Qpid Proton C: The OpenSSL TLS implementation adds a locally trusted certificate authority to the existing trusted system trust anchors.
CVE-2026-105031
9.1 Critical
-
apache qpid protonj2
Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery
CVE-2026-67592
7.5 High
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer frames per incoming delivery
CVE-2026-67555
6.5 Medium
-
apache qpid proton-j
Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery
CVE-2026-66277
6.5 Medium
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to denial of service
CVE-2026-67554
6.5 Medium
-
apache qpid proton-j
Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service
CVE-2026-66276
6.5 Medium
-
apache qpid protonj2
Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded
CVE-2026-67591
6.5 Medium
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded
CVE-2026-67553
6.5 Medium
-
apache qpid proton-j
Apache Qpid Proton-J: Incoming session flow control window can be exceeded
CVE-2026-66275
6.5 Medium
-
apache qpid protonj2
Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow
CVE-2026-67590
7.5 High
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authentication stackoverflow
CVE-2026-67552
7.5 High
-
apache qpid proton-j
Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow
CVE-2026-66274
Fix available
7.5 High
-
apache qpid protonj2
Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication
CVE-2026-67589
7.5 High
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive allocation pre-authentication
CVE-2026-67551
7.5 High
-
apache qpid proton-j
Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication
CVE-2026-66273
7.5 High
-
apache qpid protonj2
Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
CVE-2026-67588
7.5 High
-
apache qpid proton-dotnet, apache software foundation qpid proton dotnet +1 more
Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
CVE-2026-67465
7.5 High
-
apache qpid proton-j
Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion
CVE-2026-66257
7.5 High
-
apache qpid, apache software foundation qpid proton, redhat enterprise linux desktop +8 more +10 more
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton
CVE-2019-0223
Fix available
7.4 High
-
apache qpid proton-j
Improper Certificate Validation in proton-j
CVE-2018-17187
Fix available
7.4 High