CVE-2026-67589

UNKNOWN 0.0

Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.

CWE	CWE-789
Vendor	apache software foundation
Product	apache qpid protonj2
Published	Aug 5, 2026
Last Updated	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for apache software foundation apache qpid protonj2

Be the first to know when new unknown vulnerabilities affecting apache software foundation apache qpid protonj2 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Apache Software Foundation / Apache Qpid ProtonJ2

0 ≤ 1.1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

lists.apache.org: https://lists.apache.org/thread/bs24x4778dh72xtfs299cy8krvdlo47q openwall.com: http://www.openwall.com/lists/oss-security/2026/08/04/28

Credits

Apache Qpid security team 🔍 [email protected]