THREATOPS
THREAT OPSThreat News › CVE-2026-67592: Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery

CVE-2026-67592: Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery

medoss_secPublished 2026-08-04

<p>Posted by Timothy A. Bish on Aug 04</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Qpid ProtonJ2 (org.apache.qpid:protonj2) through 1.1.0<br /> <br /> Description:<br /> <br /> It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated <br /> attacker to cause excessive resource usage and potential denial o

Indicators of compromise

Original source: https://seclists.org/oss-sec/2026/q3/431