Severity: important Affected versions:
- Apache Qpid Proton-J (org.apache.qpid:proton-j) through 0.34.1 Description: An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the issue. References: https://qpid.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-66276 --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
