CVE-2026-105031

The Apache Qpid Proton C library (versions through 0.40.0 ) is vulnerable when using the OpenSSL TLS implementation. The pn_ssl_domain_set_trusted_ca_db() and pn_tls_config_set_trusted_certs() APIs incorrectly append to, rather than replace, default system trust anchors. This behavior can lead to...