CVE-2026-67588

CVE-2026-67588 affects Apache Qpid ProtonJ2 up to version 1.1.0; a pre-authentication vulnerability where unbounded symbol value caching can cause resource exhaustion and DoS. Upgrading to 1.2.0 mitigates the issue per multiple advisories (NVD, Debian, Red Hat, Ubuntu, OSV). No exploitation detai...

CVE-2026-67592

CVE-2026-67592 affects Apache Qpid ProtonJ2 (through 1.1.0). The issue is an inability to govern the maximum number of transfer frames per incoming delivery, allowing an authenticated attacker to cause excessive resource usage and a potential denial of service. The documented remediation is to up...

CVE-2026-67591

The CVE-2026-67591 affects Apache Qpid ProtonJ2 up to version 1.1.0. An authenticated attacker could exceed the session flow control incoming window, potentially causing a denial of service. Remediation: upgrade to ProtonJ2 1.2.0 or later, as recommended by sources. Details across connected docum...

CVE-2026-67589

Technical details (affected products, versions, root cause, and fixes) are not publicly available in the provided documents; monitor for updates.

CVE-2026-67590

CVE-2026-67590 affects Apache Qpid ProtonJ2 (versions up to 1.1.0). The issue is an unbounded type nesting that can be triggered pre-authentication, causing a StackOverflowError and potential denial of service. A fix is available in version 1.2.0. No exploitation details are provided in the sourc...