CVE-2025-29953

The Apache ActiveMQ NMS OpenWire Client is vulnerable to a deserialization of untrusted data (CWE-502) issue affecting versions before 2.1.1 . When connecting to untrusted servers, the client's unbounded deserialization can be abused to provide malicious responses, potentially leading to arbitrar...