Skip to content
OpenAdvisories

Package · Ubuntu

qpid-proton

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-67591

    Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded

    An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.

    Apache Software Foundation Apache Qpid ProtonJ2 qpid-proton Ubuntu
  • Medium 6.5
    CVE-2016-2166

    Moderate severity vulnerability that affects org.apache.qpid:proton-j

    The (1) proton.reactor.Connector, (2) proton.reactor.Container, and (3) proton.utils.BlockingConnection classes in Apache Qpid Proton before 0.12.1 improperly use an unencrypted connection for an amqps URI scheme when SSL support is unavailable, which might a…

    qpid-proton org.apache.qpid:proton-j Ubuntu Maven