Skip to content

Vulnerabilities of Apache Software Foundation Apache Qpid Proton-J

Is your version affected?

CVE Summary Score Published
CVE-2026-66277 It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated… Not rated Aug 5, 2026
CVE-2026-66276 An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due… Not rated Aug 5, 2026
CVE-2026-66275 An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service Not rated Aug 5, 2026
CVE-2026-66274 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of… Not rated Aug 5, 2026
CVE-2026-66273 A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential… Not rated Aug 5, 2026
CVE-2026-66257 A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to… Not rated Aug 5, 2026
CVE-2018-17187 The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the… Not rated Nov 13, 2018

Other Apache Software Foundation products