EUVD-2026-112726

A message body that is deeply nested and decoded by pnmessagebody could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue...

CVE-2026-105042

A message body that is deeply nested and decoded by pnmessagebody could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue...

CVE-2026-105042

Apache Qpid Proton C versions through 0.40.0 are vulnerable to a denial-of-service (DoS) condition due to unbounded recursion in the AMQP decoder. The pn_message_body() function decodes message bodies and recurses once per nested compound type without a depth limit. A remote peer can exploit this...