PUBLISHED
2026-08-05 07:16
MODIFIED
2026-08-05 07:16
EPSS (Prob. Exploit)
0.77%
Top 44.2%
> DESCRIPTION
A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.
This issue affects Apache Qpid ProtonJ2: through 1.1.0.
Users are recommended to upgrade to version 1.2.0, which fixes the issue.
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-674: Uncontrolled Recursion - The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
> RED HAT SECURITY ADVISORIES
Red Hat Security Advisory: AMQ Clients 2026.Q3
An update is now available for Red Hat AMQ Clients
Red Hat Product Security has rated this update as having an impact of
Important.
A Common Vulnerability Scoring System (CVSS) base score, which give...
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow
AFFECTED PACKAGES:
Unknown / Unknown
25 versions affected
> HISTORIQUE DES MODIFICATIONS
Première apparition
05/08/2026 07:16
Source: NVD
📊
ENRICHISSEMENT
01/09/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-674: Uncontrolled Recursion - The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Total des modifications: 1
Dernière mise à jour: 2 months ago