OESA-2026-2126 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: 'Severity: low \n\nAffected versions:\n\n- Apache ActiveMQ Client org.apache.activemq:activemq-client before 5.19.3\n- Apache ActiveMQ Client org.apache.activemq:activemq-client 6.0.0 before...

OESA-2026-2125 activemq security update

The most popular and powerful open source messaging and Integration Patterns server. Security Fixes: 'Severity: low \n\nAffected versions:\n\n- Apache ActiveMQ Client org.apache.activemq:activemq-client before 5.19.3\n- Apache ActiveMQ Client org.apache.activemq:activemq-client 6.0.0 before...

CVE-2026-33227 vulnerabilities

Vulnerabilities for packages: zipkin, apache-activemq-artemis...

be.yildiz-games:module-messaging-activemq (2.0.0), cn.hutool.v7:hutool-extra (>=7.0.0-m2, <=7.0.0-m5) +172 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-client (>=6.0.0, <=6.2.1)

org.apache.activemq:activemq-client MAVEN version =6.0.0, =7.0.0-m2, =0.3.1, =0.3.1, =1.1.0, =2.55.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =14.81.0 and more Source cves: CVE-2026-33227 Source advisory: OSV:GHSA-H2H4-5M64-M273...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-all (>=5.0.0, <=5.19.2)

org.apache.activemq:activemq-all MAVEN version =5.0.0, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

com.cognifide.aet:cleaner (>=2.0.0-rc2, <=3.2.2), com.cognifide.aet:communication (>=2.0.0-rc2, <=3.2.2) +204 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-web (>=4.1.1, <=5.19.2)

org.apache.activemq:activemq-web MAVEN version =4.1.1, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.0, =2015.12.01, =2015.12.01, =2015.12.01, =5.8.0-ness-1, =6.1h.4-beta, =6.1h.4-beta, =6.1h.4-beta, =6.1h.10 and more Source cves: CVE-2026-33227 Source advisory:...

CVE-2026-33227

Apache ActiveMQ products, including ActiveMQ Client , Broker , All , Web , and the core ActiveMQ project, are vulnerable to a classpath path resource loading vulnerability (CWE-22 ). An authenticated user can provide a crafted "key" value that, due to improper path concatenation, allows for class...

be.yildiz-games:module-messaging-activemq (>=1.0.0, <=1.0.1), cn.codeforfun:jfinal-activemq (0.3) +334 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-all (>=4.1.2, <=5.19.2)

org.apache.activemq:activemq-all MAVEN version =4.1.2, =1.0.0, =6.0.03, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.0-rc2, =2.0.3-rc1, =2.0.0-rc2, =1.1.6, =8.0.0-beta1, =2.0.0, =2.3.0 - com.freedomotic:base-objects 3.0 - com.freedomotic:essential 3.0 - com.freedomotic:freedomotic-core 5.6 and more...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.1) +5 more potentially affected by CVE-2026-33227 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.1 Source cves: CVE-2026-33227 Source advisory: MEND:CVE-2026-33227...

Linux Distros Unpatched Vulnerability : CVE-2026-33227

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper validation and restriction of a classpath path name vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache Active...