Most recent entries from all

fkie_cve-2026-67590

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

This issue affects Apache Qpid ProtonJ2: through 1.1.0.

Users are recommended to upgrade to version 1.2.0, which fixes the issue.

GHSA-hgf5-hpf4-qmrr

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

This issue affects Apache Qpid ProtonJ2: through 1.1.0.

Users are recommended to upgrade to version 1.2.0, which fixes the issue.

RHSA-2026:69459 — Red Hat Security Advisory: AMQ Clients 2026.Q3

Spring Boot: Spring Boot: Authentication bypass via misconfigured Health Group additional path assertj: AssertJ: Information disclosure and denial of service via XML External Entity (XXE) io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values Spring Boot: Spring Boot: Weak pseudo-random number generation can lead to information disclosure. micrometer: micrometer-core: Micrometer: Denial of Service via specially crafted gRPC requests micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers netty: io.netty/netty-codec-compression: io.netty/netty-codec: Netty: Denial of Service via excessive memory allocation in LZ4FrameDecoder netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake netty-handler: Netty: Improper trust manager handling leads to hostname ver…

UBUNTU-CVE-2026-67590

Affected: Ubuntu:16.04:LTS: qpid-proton, Ubuntu:18.04:LTS: qpid-proton, Ubuntu:20.04:LTS: qpid-proton, Ubuntu:22.04:LTS: qpid-proton, Ubuntu:24.04:LTS: qpid-proton, Ubuntu:26.04:LTS: qpid-proton

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.