Apache Software Foundation Apache ActiveMQ Stomp

• CVE-2026-49432 High 7.5 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: STOMP negative content-length enables denial of service 0.8%
• CVE-2026-53916 High 7.5 Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp: Unbounded header buffer in STOMP NIO codec 0.7%