NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#amqp

0 stories this week · 3 this month · 8 in 6 months · mostly security

Stories per day · 30 days

Relatedapache3 qpid-proton3 authentication-bypass1 buffer-overflow1 denial-of-service1 sasl1 tls1

2 stories, newest first · one card per story

oss-security14d agohigh

Qpid Proton C through 0.40.0 can treat AMQP frames as SASL

Apache calls the flaw important: peers can send regular AMQP frames that Proton dispatches as SASL, with no username set.

4 sources apache qpid-proton

1

oss-securitySep 24, 2026

CVE-2026-92564: Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

Pre-auth type nesting in Qpid Broker-J through 10.1.0 can stack-overflow the broker.

6 sources apache qpid

2