CVE-2026-66273

A pre-authentication vulnerability exists in Apache Qpid Proton-J (affected versions up to and including 0.34.1 ) due to improper handling of type sizes and counts . A remote attacker can exploit this flaw to trigger excessive memory allocation , which may cause the system to become unresponsive,...

CVE-2026-66257

A pre-authentication attacker can exploit unbounded symbol value caching in Apache Qpid Proton-J (versions through 0.34.1 ) to cause resource exhaustion, leading to a denial of service (DoS) . This vulnerability is categorized under CWE-770 . Impacted systems may become unavailable to legitimate ...

CVE-2026-66274

A pre-authentication attacker can exploit a flaw in Apache Qpid Proton-J (versions through 0.34.1 ) to cause a StackOverflowError . The vulnerability is caused by unbounded type nesting , which can result in a denial of service (DoS) by making the affected system unresponsive. To remediate this, ...

CVE-2026-66276

The Apache Qpid Proton-J messaging library (versions through 0.34.1 ) is vulnerable to a Denial of Service (DoS) condition due to naive range handling . An authenticated attacker can craft a disposition frame containing large or illegal ranges, triggering excessive CPU usage . This flaw affects t...

CVE-2026-66275

The Apache Qpid Proton-J messaging library (versions through 0.34.1 ) is vulnerable to a resource exhaustion flaw. An authenticated attacker can exploit improper enforcement of the session flow control process by exceeding the incoming window. This allows the attacker to send data that exhausts a...

CVE-2026-66277

The Apache Qpid Proton-J messaging library (versions through 0.34.1 ) is vulnerable to a resource exhaustion flaw because it fails to govern the maximum number of transfer frames per incoming delivery. An authenticated attacker can exploit this by sending an excessive number of transfer frames in...