EUVD-2026-66756

stomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP frames and keep the TCP connections open, which, combined with the broker s use of edge-triggered epoll EPOLLET and MSGPEEK in recv, causes sockets to enter a permanent half-read state. When enough such...

CVE-2026-26445

stomper at commit 5e2741e is vulnerable to a Denial of Service caused by a combination of partial STOMP frames and the broker's use of edge-triggered epoll (EPOLLET) with MSG_PEEK in recv(). A malicious client can send incomplete STOMP frames while keeping TCP connections open, causing sockets to...