CVE-2026-67554

CVE-2026-67554 affects Apache Qpid Proton-Dotnet up to version 1.0.0. An authenticated attacker can craft a disposition frame with large or illegal ranges due to naive range handling, causing excessive CPU usage and leading to denial of service. Product: Apache Qpid Proton-Dotnet (affected); Root...

CVE-2026-67551

CVE-2026-67551 : A pre-authentication issue affects Apache Qpid Proton-Dotnet (through version 1.0.0) where improper handling of type size/count can cause excessive memory allocation, leading to a potential denial of service . The vulnerability is mitigated by upgrading to version 1.1.0 , which f...

CVE-2026-67465

CVE-2026-67465 affects Apache Qpid Proton-Dotnet up to version 1.0.0. The root cause is unbounded symbol value caching, which can exhaust resources and trigger denial of service after pre-authentication. Upgrading to version 1.1.0 is recommended, as it contains the fix. The CVSS details indicate ...

CVE-2026-67553

CVE-2026-67553 concerns Apache Qpid Proton-Dotnet, affected up to version 1.0.0. The issue arises from an authenticated attacker who can exceed the session flow control incoming window, which can cause a denial of service. The vulnerability affects the handling of the session flow control mechani...

CVE-2026-67552

Apache Qpid Proton-Dotnet (up to version 1.0.0) is affected by CVE-2026-67552 due to unbounded type nesting that can cause a pre-authentication StackOverflowError, potentially leading to denial of service. The vulnerability arises from excessive nesting in type handling and does not require user ...

CVE-2026-67555

The CVE-2026-67555 entry concerns Apache Qpid Proton-Dotnet up to version 1.0.0, where the maximum number of transfer frames per incoming delivery could not be governed. This could allow an authenticated attacker to cause excessive resource usage and potential denial of service (availability impa...