CVE-2026-67590

CVE-2026-67590 affects Apache Qpid ProtonJ2 up to version 1.1.0. The issue is caused by unbounded type nesting, allowing a pre-authentication attacker to trigger a StackOverflowError and potentially cause a denial of service. A fixed version is available: upgrade to ProtonJ2 1.2.0. If upgrading i...