Apache.NMS.ActiveMQ vulnerabilities

CVEs whose affected-version data names the Apache.NMS.ActiveMQ package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-103582None

2d ago

Apache ActiveMQ NMS OpenWire Client Library: Unbounded/Unvalidated Length Fields in Apache.NMS.OpenWire Unmarshalling (DoS)

Unbounded memory allocation and missing frame size validation in Apache NMS ActiveMQ (the .NET OpenWire client, package Apache.NMS.ActiveMQ) before 2.3.0. The OpenWire unmarshalling code trusted the frame size and the length and count…

▾ SunlitApache Software Foundation · Apache.NMS.ActiveMQvia CVEORG