CVE-2026-43798: Stack-based Buffer Overflow

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

PT-2026-79113

An unauthenticated remote peer can crash any NIOWebSocket-based server including Vapor and Hummingbird with a single 11-byte frame sent after a completed WebSocket handshake, dropping all active connections until the process restarts. This vulnerability is addressed in swift-nio version 2.101.0...

PT-2026-79134

A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and content against any application built on swift-nio-ssh. This vulnerability is addressed in swift-nio-ssh version 0.14.1...

BIT-ACTIVEMQ-2026-59878 Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All: AMQP NIO negative frame size validation bypass leading to DoS

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

The vulnerability of the ActiveMQ NIO SSL module in Apache ActiveMQ products allows a attacker to cause a service failure.

The vulnerability of the ActiveMQ NIO SSL software products of Apache ActiveMQ is related to an uncontrolled resource consumption. Exploiting this vulnerability may allow a malicious actor to cause service failures...

PT-2026-73235

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

Denial Of Service (DoS)

Apache ActiveMQ is vulnerable to a Memory Allocation with Excessive Size Value vulnerability. The vulnerability is due to improper handling of non-terminating STOMP header bytes, which allows an unauthenticated attacker to send an excessive amount of header data over a STOMP NIO connection, causi...

Oracle Linux 8 : pki-deps:10.6 (ELSA-2026-43218)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-43218 advisory. - Resolves: CVE-2015-5262 - Resolves: CVE-2014-3577 - Resolves: rhbz1658846 CVE-2018-8034 pki-servlet-container: tomcat: host name verification missing in...

Dependency on Vulnerable Third-Party Component

Overview matrix-nio is an A Python Matrix client library, designed according to sans I/O principles. Affected versions of this package are vulnerable to Dependency on Vulnerable Third-Party Component due to the use of a deprecated cryptographic dependency, which introduces multiple cryptographic...

Improper Validation of Specified Quantity in Input

Overview org.apache.activemq:activemq-amqp is a high performance Apache 2.0 licensed Message Broker and JMS 1.1 implementation. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in AmqpFrameParser and AmqpWireFormat in the AMQP NIO transport. A...

Improper Validation of Specified Quantity in Input

Overview org.apache.activemq:activemq-all is a package that puts together an ActiveMQ jar bundle. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in AmqpFrameParser and AmqpWireFormat in the AMQP NIO transport. An attacker can cause a denial ...

Improper Validation of Specified Quantity in Input

Overview org.apache.activemq:apache-activemq is a Message Broker and Client implementations. Affected versions of this package are vulnerable to Improper Validation of Specified Quantity in Input in AmqpFrameParser and AmqpWireFormat in the AMQP NIO transport. An attacker can cause a denial of...

DEBIAN-CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

CVE-2026-59878: Improper Input Validation

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All. A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done...

swift-nio-http2: Missing CR/LF/NUL validation in header values

SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting...

CVE-2026-64785

SwiftNIO HTTP/2 versions prior to 1.45.0 are vulnerable to HTTP request smuggling or response splitting due to insufficient validation of inbound HEADERS frames. The NIOHTTP2 HTTP/2-to-HTTP/1 codec fails to inspect regular header field values for CR or LF characters and fails to check :path pseud...

CVE-2026-64785

SwiftNIO HTTP/2 was missing validation on inbound HEADERS frames that let CR, LF, NUL, SP and other control characters reach an HTTP/1.1 backend through NIOHTTP2's HTTP/2-to-HTTP/1 codec, enabling HTTP request smuggling or response splitting. This vulnerability is addressed in swift-nio-http2...