org.apache.activemq:activemq-runtime-config vulnerabilities

CVEs whose affected-version data names the org.apache.activemq:activemq-runtime-config package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111822None

2d ago

Apache ActiveMQ, Apache ActiveMQ Runtime Config: ActiveMQ retains write access after live ACL revocation

Improper invalidation of cached authorizations vulnerability in Apache ActiveMQ, Apache ActiveMQ Runtime Config. After the runtime configuration plugin removes a principal's write grant on a destination, an authenticated connection op…

▾ SunlitApache Software Foundation · org.apache.activemq:apache-activemqvia CVEORG