Package · Maven

org.apache.qpid:proton-j

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-66274

Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issu…

Apache Software Foundation Apache Qpid Proton-J logstash-9.3 logstash-9.3-iamguarded-compat Wolfi Maven

Aug 5, 2026
High 7.4

CVE-2018-17187

Improper Certificate Validation in proton-j

The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. Unless a verification mode was explicitly configured, client and server modes previously defaulted as documented to not v…

Apache Software Foundation Apache Qpid Proton-J qpid-proton qpid-proton Debian Ubuntu Maven

Nov 13, 2018