CVE-2026-67592

A vulnerability exists in Apache Qpid ProtonJ2 (versions through 1.1.0 ) where the system fails to limit the number of transfer frames per incoming delivery. An authenticated attacker can exploit this lack of governance to cause excessive resource usage , potentially resulting in a denial of serv...

CVE-2026-67591

An authenticated attacker can exploit a flaw in Apache Qpid ProtonJ2 (versions through 1.1.0 ) by exceeding the session flow control incoming window . This vulnerability can lead to a denial of service (DoS) , rendering the system unavailable to legitimate users. To remediate this issue, users ar...

CVE-2026-67588

A flaw in Apache Qpid ProtonJ2 (versions through 1.1.0 ) allows a remote, unauthenticated attacker to exploit unbounded symbol value caching . This vulnerability can lead to resource exhaustion , resulting in a denial of service (DoS) for legitimate users. To remediate this issue, users are recom...

CVE-2026-67589

A vulnerability exists in Apache Qpid ProtonJ2 (versions through 1.1.0) where a flaw in type size and count handling allows a pre-authentication attacker to trigger excessive memory allocation . This can result in a Denial of Service (DoS) , potentially making the affected system unavailable to l...

CVE-2026-67590

A vulnerability in Apache Qpid ProtonJ2 (versions through 1.1.0) allows a pre-authentication attacker to exploit unbounded type nesting . This flaw can trigger a StackOverflowError , potentially resulting in a denial of service (DoS) where the application becomes unresponsive. To remediate this i...