CyberRota Analysis
AI-GeneratedApache Qpid ProtonJ2 versions up to 1.1.0 are vulnerable to a pre-authentication attack that exploits type size and count handling, potentially leading to excessive memory allocation and resulting in a denial of service. Organizations using this messaging library should prioritize upgrading to version 1.2.0 to mitigate this risk.
CVE
CVE-2026-67589
Severity
HIGH
CVSS
7.5
EPSS
0.49%
Apache
Original NVD Description
A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service. This issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)