Apache Software Foundation Apache Qpid ProtonJ2

• CVE-2026-67592 High 7.5 Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames per incoming delivery 0.7%
• CVE-2026-67591 Medium 6.5 Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded 0.7%
• CVE-2026-67590 High 7.5 Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication stackoverflow 0.8%
• CVE-2026-67589 High 7.5 Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocation pre-authentication 0.8%
• CVE-2026-67588 High 7.5 Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authentication resource exhaustion 0.8%