Apache ActiveMQ Client vulnerabilities

3 known vulnerabilities in Apache ActiveMQ Client from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache ActiveMQ: Memory Allocation with Excessive Size Value

  CVE-2026-53917Jun 30, 2026Apache

  Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker. An authenticated user can cause a broker DoS by sending a crafted OpenWire Message with a large encoded size valu

• 7.5 High severity

  Apache ActiveMQ Client: Memory Allocation with Excessive Size Value

  CVE-2026-50734Jun 30, 2026Apache

  Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All. An unauthenticated network attacker can cause a broker DoS by sending a crafted WireFormatInfo frame with a malicious large size value. T

• 7.5 High severity

  Apache ActiveMQ Client: Uncontrolled Resource Consumption

  CVE-2026-39304Apr 10, 2026Apache

  Denial of Service via Out of Memory vulnerability in Apache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ. ActiveMQ NIO SSL transports do not correctly handle TLSv1.3 handshake KeyUpdates triggered by clients. This makes it possible for a client to