ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6), ai.tripl:arc-jupyter_2.11 (>=0.0.13, <=0.0.14) +919 more potentially affected by CVE-2026-66257 via org.apache.qpid:proton-j (>=0.7, <=0.34.1)

org.apache.qpid:proton-j MAVEN version =0.7, =1.7, =0.0.13, =1.13.3, =2.1.0, =1.0.1, =2.0.1, =1.0.0, =2.0.4, =3.0.0-beta.1, =2.0.0-beta.1, =2.14.0 and more Source cves: CVE-2026-66257 Source advisory: SNYK:JAVA-ORGAPACHEQPID-19316549...

CVE-2026-66257

A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue...

CVE-2026-66257

A pre-authentication attacker can exploit unbounded symbol value caching in Apache Qpid Proton-J (versions through 0.34.1 ) to cause resource exhaustion, leading to a denial of service (DoS) . This vulnerability is categorized under CWE-770 . Impacted systems may become unavailable to legitimate ...