Denial-of-service (DoS)

org.apache.qpid, protonj2 is vulnerable to a denial-of-service DoS. The vulnerability is due to improper handling of the session flow-control incoming window, which allows an authenticated attacker to exceed the allowed window and potentially exhaust resources...