ROOT-APP-MAVEN-CVE-2025-27533 CVE-2025-27533 in io.root.org.apache.activemq:activemq-openwire-legacy - Patched by Root

Root has patched CVE-2025-27533 in the io.root.org.apache.activemq:activemq-openwire-legacy package for Root:Maven. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat AMQ Broker 7.13.2 release and security update

Red Hat AMQ Broker 7.13.2 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

at.chrl:chrl-jms (1.1.0), at.researchstudio.sat:won-core (>=0.2, <=0.9) +1091 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.8.0, <=5.16.7)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.8.0, =0.2, =0.3, =0.2, =0.2, =0.3, =0.3, =0.3, =0.3, =0.3, =0.2, =0.3, =0.3, =0.6 - at.researchstudio.sat:won-owner 0.3 - at.researchstudio.sat:won-owner-webapp 0.3 and more Source cves: CVE-2025-27533 Source advisory: GHSA-WHXR-3P84-R...

com.chutneytesting:chutney-kotlin-dsl (>=0.1.18, <=1.0.1), com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7) +159 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.17.0, <=5.17.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.17.0, =0.1.18, =0.5.6, =0.5.6, =0.5.6, =0.3.0, =0.3.0, =0.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2025-27533 Source advisory:...

com.chutneytesting:chutney-kotlin-dsl (>=0.1.18, <=1.0.1), com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7) +159 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.17.0, <=5.17.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.17.0, =0.1.18, =0.5.6, =0.5.6, =0.5.6, =0.3.0, =0.3.0, =0.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2025-27533 Source advisory:...

com.chutneytesting:chutney-kotlin-dsl (>=0.1.18, <=1.0.1), com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7) +159 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.17.0, <=5.17.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.17.0, =0.1.18, =0.5.6, =0.5.6, =0.5.6, =0.3.0, =0.3.0, =0.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2025-27533 Source advisory: GHSA-WHXR-3P84-RF3C...

be.yildiz-games:module-messaging-activemq (1.0.15), com.chutneytesting:action-impl (>=2.2.1, <=3.0.0) +53 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.18.0, <=5.18.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.18.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.17.0, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =1.2.1.2, =1.2.1.1-beta.1, =0.10.0, =1.1.0, =1.5.0, =1.8.0 and more Source cves:...

be.yildiz-games:module-messaging-activemq (1.0.15), com.chutneytesting:action-impl (>=2.2.1, <=3.0.0) +53 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.18.0, <=5.18.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.18.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.17.0, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =1.2.1.2, =1.2.1.1-beta.1, =0.10.0, =1.1.0, =1.5.0, =1.8.0 and more Source cves:...

be.yildiz-games:module-messaging-activemq (1.0.15), com.chutneytesting:action-impl (>=2.2.1, <=3.0.0) +53 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.18.0, <=5.18.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.18.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.17.0, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =1.2.1.2, =1.2.1.1-beta.1, =0.10.0, =1.1.0, =1.5.0, =1.8.0 and more Source cves:...

be.yildiz-games:module-messaging-activemq (2.0.0), com.codbex.atlas:codbex-atlas-application (>=1.1.0, <=15.0.0) +78 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=6.0.0, <=6.1.5)

org.apache.activemq:activemq-openwire-legacy MAVEN version =6.0.0, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.2.2, =1.4.0, =6.0.0, =6.1.5 and more Source cves: CVE-2025-27533 Source advisory: OSV:GHSA-WHXR-3P84-RF3C...

be.yildiz-games:module-messaging-activemq (2.0.0), com.codbex.atlas:codbex-atlas-application (>=1.1.0, <=15.0.0) +78 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=6.0.0, <=6.1.5)

org.apache.activemq:activemq-openwire-legacy MAVEN version =6.0.0, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.2.2, =1.4.0, =6.0.0, =6.1.5 and more Source cves: CVE-2025-27533 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-10074038...

be.yildiz-games:module-messaging-activemq (2.0.0), com.codbex.atlas:codbex-atlas-application (>=1.1.0, <=15.0.0) +78 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=6.0.0, <=6.1.5)

org.apache.activemq:activemq-openwire-legacy MAVEN version =6.0.0, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.2.2, =1.4.0, =6.0.0, =6.1.5 and more Source cves: CVE-2025-27533 Source advisory: GHSA-WHXR-3P84-RF3C...

Memory Allocation with Excessive Size Value

Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value during the unmarshalling of OpenWire commands, where the size value of buffers is not properly validated. An attacker can deplete process memory and cause service disruptions by sending crafte...

com.chutneytesting:chutney-kotlin-dsl (>=0.1.18, <=1.0.1), com.codbex.aion:codbex-aion-platform (>=0.5.6, <=0.5.7) +159 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.17.0, <=5.17.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.17.0, =0.1.18, =0.5.6, =0.5.6, =0.5.6, =0.3.0, =0.3.0, =0.5.3, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.2.0, =0.4.0 and more Source cves: CVE-2025-27533 Source advisory: MEND:CVE-2025-27533...

be.yildiz-games:module-messaging-activemq (1.0.15), com.chutneytesting:action-impl (>=2.2.1, <=3.0.0) +53 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=5.18.0, <=5.18.6)

org.apache.activemq:activemq-openwire-legacy MAVEN version =5.18.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =0.17.0, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =rc0-0.19.12-2023-10-27, =1.2.1.2, =1.2.1.1-beta.1, =0.10.0, =1.1.0, =1.5.0, =1.8.0 and more Source cves:...

be.yildiz-games:module-messaging-activemq (2.0.0), com.codbex.atlas:codbex-atlas-application (>=1.1.0, <=15.0.0) +78 more potentially affected by CVE-2025-27533 via org.apache.activemq:activemq-openwire-legacy (>=6.0.0, <=6.1.5)

org.apache.activemq:activemq-openwire-legacy MAVEN version =6.0.0, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =0.2.2, =1.4.0, =6.0.0, =6.1.5 and more Source cves: CVE-2025-27533 Source advisory: MEND:CVE-2025-27533...

Apache ActiveMQ NMS OpenWire Client Code Execution

The vulnerability of the Apache ActiveMQ NMS OpenWire Client software platform lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Critical: Red Hat Security Advisory: Red Hat AMQ Broker 7.10.5 release and security update

Red Hat AMQ Broker 7.10.5 is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Critical: Red Hat Security Advisory: security update jboss-amq-6/amq63-openshift container image

Red Hat AMQ 6.3 container image is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Critical: Red Hat Security Advisory: jboss-amq-6-amq63-openshift-container security update

An update for jboss-amq-6-amq63-openshift-container is now available for RHEL-7 based Middleware Containers. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...