Apache Software Foundation Apache ActiveMQ Stomp vulnerabilities (CVE)

CVE records published for Apache Software Foundation Apache ActiveMQ Stomp, newest first. Follow to get an email when a new one appears.

2 results

7.5High

CVE-2026-49432 4 months ago

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service

Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Stomp

Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger denial-of-service behavior by sending a negative content-length. For t…

7.5High

CVE-2026-53916 4 months ago

Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec

Apache Software Foundation Apache ActiveMQ; Apache Software Foundation Apache ActiveMQ All; Apache Software Foundation Apache ActiveMQ Stomp

Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer th…