CVE-2026-67554

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a Denial of Service (DoS) condition. An authenticated attacker can exploit naive range handling by crafting a disposition frame containing large or illegal ranges, which triggers excessive CPU usage . To remediate th...

CVE-2026-67465

A flaw in Apache Qpid Proton-Dotnet (versions through 1.0.0) allows a remote, unauthenticated attacker to cause a Denial of Service (DoS) . The vulnerability is triggered by leveraging unbounded symbol value caching , which leads to resource exhaustion and makes the system unavailable to legitima...

CVE-2026-67551

Apache Qpid Proton-Dotnet versions through 1.0.0 are vulnerable to a Denial of Service (DoS) condition. A pre-authentication attacker can exploit a flaw in the handling of type sizes and counts to trigger excessive memory allocation , potentially crashing the system. Remediation is available by u...

CVE-2026-67553

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a resource exhaustion issue where an authenticated attacker can exceed the session flow control incoming window . This flaw could potentially lead to a denial of service (DoS) . To remediate this vulnerability, users...

CVE-2026-67555

The Apache Qpid Proton-Dotnet library (versions through 1.0.0 ) is vulnerable to a resource exhaustion issue because it fails to govern the maximum number of transfer frames per incoming delivery. This allows an authenticated attacker to trigger excessive resource usage, potentially resulting in ...

CVE-2026-67552

A flaw in Apache Qpid Proton-Dotnet (versions through 1.0.0) allows a remote, pre-authentication attacker to exploit a weakness in how the software handles data structures with excessive nesting . By leveraging this unbounded type nesting , an attacker can trigger a StackOverflowError , resulting...