CVE-2026-92560

A flaw was found in Apache Qpid Broker-J within the Advanced Message Queuing Protocol AMQP 0-10 decoder component. An unauthenticated remote attacker could exploit improper type size and count handling by sending specially crafted network messages. This can trigger excessive memory allocation,...

Uncaught Exception

Overview Affected versions of this package are vulnerable to Uncaught Exception due to improper exception handling in the process of converting message properties from AMQP 1.0 to AMQP 0-10. An attacker can disrupt message delivery to AMQP 0-10 consumers by sending specially crafted message...

Allocation of Resources Without Limits or Throttling

Overview org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol is a maven plugin for AMQP 0-10 protocol broker. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via improper handling of type size and count in the AMQP 0-10 decoder. An...

fr.enedis.chutney:action-impl (5.0.0), fr.enedis.chutney:chutney-kotlin-dsl (5.0.0) +6 more potentially affected by CVE-2026-92550 via org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92550 Source advisory: MEND:CVE-2026-92550...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) +2 more potentially affected by CVE-2026-92560 via org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-0-10-protocol MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92560 Source advisory: MEND:CVE-2026-92560...

CVE-2026-92560 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92560

The Apache Qpid Broker-J software (versions through 10.1.0) is vulnerable to a denial of service condition. A pre-authentication attacker can exploit improper type size/count handling within the AMQP 0-10 decoder to trigger excessive allocation . To remediate this issue, users are recommended to ...

CVE-2026-92560 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92560 Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92608

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

CVE-2026-92608

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

CVE-2026-92608 Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

CVE-2026-92608 Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

CVE-2026-92608

The Apache Qpid Broker-J software, versions through 10.1.0 , is vulnerable to a flaw involving improper handling of property-encoding exceptions during AMQP 1.0-to-AMQP 0-10 message conversion. This issue allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers by using m...

org.apache.qpid:apache-qpid-broker-j (>=10.0.0, <=10.1.0), org.apache.qpid:qpid-broker (>=10.0.0, <=10.1.0) potentially affected by CVE-2026-92608 via org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 (>=10.0.0, <=10.1.0)

org.apache.qpid:qpid-broker-plugins-amqp-msg-conv-0-10-to-1-0 MAVEN version =10.0.0, =10.0.0, =10.0.0, =10.1.0 Source cves: CVE-2026-92608 Source advisory: MEND:CVE-2026-92608...

CVE-2026-92608 Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

CVE-2026-92608: Uncaught Exception

Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers via message properties that the target encoder does not handle correctly. This issue affects Apache Qpid Broker-J: throug...

PT-2026-98390

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description Improper handling of property-encoding exceptions during AMQP 1.0-to-AMQP 0-10 message conversion allows authenticated message producers to disrupt delivery to AMQP 0-10 consumers. This...

anylearn (>=0.20.5rc1, <=0.20.7), iotdb-session-0-10-1 (>=0.1.0, <=0.1.5) +1 more potentially affected by CVE-2025-26864 via apache-iotdb (>=0.10.1, <=1.3.2.post0)

apache-iotdb PYPI version =0.10.1, =0.20.5rc1, =0.1.0, =0.0.1, =0.0.4 Source cves: CVE-2025-26864 Source advisory: OSV:GHSA-5FC3-PQF2-57CX...

SUSE CVE-2023-36617

A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396parser.rb and rfc3986parser.rb. NOTE: this issue exists becuse of a...