THREATOPS
THREAT OPSThreat News › CVE-2026-66274: Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow

CVE-2026-66274: Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow

medoss_secPublished 2026-08-04

<p>Posted by Robbie Gemmell on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid Proton-J (org.apache.qpid:proton-j) through 0.34.1<br /> <br /> Description:<br /> <br /> A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial <br /> of service.<br /> <br /> This issue affects Apache Qpid Proton-J

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/410