Threats affecting pkg:maven/Apache Software Foundation/org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-92550Apache Qpid Broker-J · Excessive Memory Allocation High7.5EPSS 0.5%2026-09-25CVE Database V5CVE-2026-92550 A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue. EPSS 0.5%Vulnerability Apache Software Foundation CWE-789	CVE Database V5	2026-09-25
High	7.5	EPSS 0.5%	CVE-2026-92564Apache Qpid Broker-J · Uncontrolled Recursion High7.5EPSS 0.5%2026-09-25CVE Database V5CVE-2026-92564 A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. This issue affects Apache Qpid Broker-J: through 10.1.0. Users are recommended to upgrade to version 10.1.1, which fixes the issue. EPSS 0.5%Vulnerability Apache Software Foundation CWE-674	CVE Database V5	2026-09-25

Page 1 of 1