Skip to content
OpenAdvisories

Package · Maven

org.apache.qpid:proton-j

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.5
    CVE-2026-66274

    Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow

    A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issu…

    Apache Software Foundation Apache Qpid Proton-J logstash-9.3 logstash-9.3-iamguarded-compat Wolfi Maven
  • High 7.4
    CVE-2018-17187

    Improper Certificate Validation in proton-j

    The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not v…

    Apache Software Foundation Apache Qpid Proton-J qpid-proton qpid-proton Debian Ubuntu Maven
  • Medium 6.5
    CVE-2016-2166

    Moderate severity vulnerability that affects org.apache.qpid:proton-j

    The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might a…

    qpid-proton org.apache.qpid:proton-j Ubuntu Maven