Apache qpid proton-j

This hub aggregates every CVE we track for Apache qpid proton-j, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Apache qpid proton-j.

• CVE-2026-66277Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames per incoming delivery6.5Aug 5, 2026
• CVE-2026-66276Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial of service6.5Aug 5, 2026
• CVE-2026-66275Apache Qpid Proton-J: Incoming session flow control window can be exceeded6.5Aug 5, 2026
• CVE-2026-66274Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow7.5Aug 5, 2026
• CVE-2026-66273Apache Qpid Proton-J: Type size/count handling can lead to excessive allocation pre-authentication7.5Aug 5, 2026
• CVE-2026-66257Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authentication resource exhaustion7.5Aug 5, 2026
• CVE-2018-17187The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, clien...7.4Nov 13, 2018