org.apache.activemq:activemq-kahadb-store vulnerabilities

CVEs whose affected-version data names the org.apache.activemq:activemq-kahadb-store package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111821None

2d ago

Apache ActiveMQ, Apache ActiveMQ KahaDB: Oversized client identifier strings poison the KahaDB journal

Improper input validation vulnerability in Apache ActiveMQ, Apache ActiveMQ KahaDB. A user can create a durable subscription with a clientId and subscription name that have a combined length > 65,535 (while separately being shorter) o…

▾ SunlitApache Software Foundation · org.apache.activemq:apache-activemqvia CVEORG