AlmaLinux 9.2 [TuxCare] Security Update: pki-jackson-jaxrs-json-provider / pki-jackson-jaxrs-providers / etc (ALMALINUX9.2:CLSA-2025:1764771605)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764771605 advisory. - jackson-core contains core low-level incremental streaming parser and generator abstractions used by Jackson Data Processor. In versions...

AlmaLinux 9.2 [TuxCare] Security Update: pki-jackson-annotations / pki-jackson-annotations-javadoc (ALMALINUX9.2:CLSA-2025:1764847045)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764847045 advisory. - jackson-core contains core low-level incremental streaming parser and generator abstractions used by Jackson Data Processor. In versions...

Uncontrolled Resource Consumption

Apache Qpid Proton-J is vulnerable to Uncontrolled Resource Consumption. The vulnerability is due to improper handling of deeply nested types, which allows a pre-authentication attacker to trigger a StackOverflowError and cause a denial-of-service condition...

AlmaLinux 9.2 [TuxCare] Security Update: pki-jackson-databind (ALMALINUX9.2:CLSA-2025:1764858279)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1764858279 advisory. - jackson-core contains core low-level incremental streaming parser and generator abstractions used by Jackson Data Processor. In versions...

CVE-2026-92564

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92564

The Apache Qpid Broker-J (versions through 10.1.0 ) is vulnerable to a Denial of Service (DoS) condition via unbounded type nesting . An unauthenticated remote attacker can send specially crafted messages containing deeply nested data structures during AMQP 0-8/0-9/0-9-1 field-table processing. B...

EUVD-2026-86583

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

CVE-2026-92564 Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

PT-2026-98405

Name of the Vulnerable Software and Affected Versions Apache Qpid Broker-J versions prior to 10.1.1 Description A pre-authentication attacker can use type nesting to trigger a StackOverflowError, which may result in a denial of service. A StackOverflowError occurs when the application's call stac...

CVE-2026-92564: Uncontrolled Recursion

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue...

org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting

A flaw was found in Apache Qpid Proton-J. A remote attacker, without needing to authenticate, could exploit a vulnerability related to unbounded type nesting. This could lead to a StackOverflowError, causing the affected system to become unresponsive and resulting in a denial of service...

CVE-2026-95844

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie insertion and matching operations. A remote client can publish or subscribe with a deeply nested topic, causing a...

CVE-2026-62296

A flaw was found in HAPI FHIR, a Java implementation of the HL7 FHIR standard. The XHTML narrative parser does not limit element nesting depth, which allows a deeply nested narrative to trigger unbounded recursion. A remote attacker can exploit this vulnerability by submitting FHIR resources...

CVE-2026-59275

A flaw was found in Spring AMQP. A remote attacker could send a specially crafted, hostile Advanced Message Queuing Protocol AMQP message. This message could bypass allowlist protections and trigger a StackOverflowError, leading to the termination of the entire consumer Java Virtual Machine JVM...

CVE-2026-95844 Moquette deeply nested MQTT topics can cause stack exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie insertion and matching operations. A remote client can publish or subscribe with a deeply nested topic, causing a...

CVE-2026-95844 Moquette deeply nested MQTT topics can cause stack exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie insertion and matching operations. A remote client can publish or subscribe with a deeply nested topic, causing a...

CVE-2026-95844 Moquette deeply nested MQTT topics can cause stack exhaustion

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie insertion and matching operations. A remote client can publish or subscribe with a deeply nested topic, causing a...

EUVD-2026-85414

Moquette is a lightweight Java MQTT broker. Prior to 0.18.1, Moquette does not limit the depth of topic names and topic filters before processing them through recursive CTrie insertion and matching operations. A remote client can publish or subscribe with a deeply nested topic, causing a...

CVE-2026-95844

The Moquette Java MQTT broker is vulnerable to a StackOverflowError in versions prior to 0.18.1 . The root cause is the lack of depth limits on topic names and topic filters during recursive CTrie insertion and matching operations. A remote client can exploit this by publishing or subscribing wit...