CVE-2025-54539

The Apache ActiveMQ NMS AMQP Client is vulnerable to a Deserialization of Untrusted Data issue in versions up to and including 2.3.0 . The root cause is unbounded deserialization logic triggered when the client establishes connections to untrusted AMQP servers. A malicious server can craft respon...