Apache ActiveMQ Stomp vulnerabilities

2 known vulnerabilities in Apache ActiveMQ Stomp from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Apache ActiveMQ: Memory Allocation with Excessive Size Value

  CVE-2026-53916Jun 30, 2026Apache

  Memory Allocation with Excessive Size Value vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. An unauthenticated client that opens a STOMP NIO connection can send header bytes that never terminate which makes the broker buffer them

• 7.5 High severity

  Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache…

  CVE-2026-49432Jun 30, 2026Apache

  Improper Input Validation vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Stomp. A remote unauthenticated peer that can reach an exposed STOMP connector can trigger denial-of-service behavior by sending a negative content-length. For the