Insertion of Sensitive Information into Log File

Overview org.apache.activemq:artemis-core-client is a High-performance, non-blocking architecture for the next generation of event-driven messaging applications. Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File when the ConfigurationImpl logger ...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.12), br.com.faroltech:mssc-brewery-bom (>=1.0.3 <=1.0.5) +922 more potentially affected by CVE-2025-27391 via org.apache.activemq:artemis-core-client (>=1.5.1 <=2.3.0)

org.apache.activemq:artemis-core-client MAVEN version =1.5.1, =1.0.1, =1.0.3, =5.0.9, =6.0.0, =2.2.1, =2.2.1, =2.2.2, =2.2.1, =1.0.3, =1.0.7364, =1.6, =1.1, =0.1.19, =0.2.5 and more Source cves: CVE-2025-27391 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-9689863...

Denial Of Service (DoS)

artemis-core-client is vulnerable to denial of service. The vulnerability exists due to the Out of memory OOM condition in the encodeXid function of XidCodecSupport.java as the function does not properly encode the reading data, allowing an attacker to crash the application by providing a...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.5), br.com.faroltech:mssc-brewery-bom (>=1.0.3 <=1.0.5) +405 more potentially affected by CVE-2021-4040 via org.apache.activemq:artemis-core-client (>=1.0.0 <=2.19.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =1.0.3, =1.6, =1.1, =1.0.3, =1.0.0, =1.0.12, =1.0.0, =1.0.0, =2019.9.14, =2019.9.14, =2021.11.24 and more Source cves: CVE-2021-4040 Source advisory: OSV:GHSA-GF8C-J759-86MG...

biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.5), br.com.faroltech:mssc-brewery-bom (>=1.0.3 <=1.0.5) +405 more potentially affected by CVE-2022-23913 via org.apache.activemq:artemis-core-client (>=1.0.0 <=2.19.0)

org.apache.activemq:artemis-core-client MAVEN version =1.0.0, =1.0.1, =1.0.3, =5.0.9, =1.0.3, =1.6, =1.1, =1.0.3, =1.0.0, =1.0.12, =1.0.0, =1.0.0, =2019.9.14, =2019.9.14, =2021.11.24 and more Source cves: CVE-2022-23913 Source advisory: OSV:GHSA-PR38-QPXM-G88X...