Security
| CVE-ID | Severity | Affected versions | Fixed versions | Summary |
|---|---|---|---|---|
| CVE-2016-3094 | Important | 6.0.0, 6.0.1, and 6.0.2 | 6.0.3 | Denial of service |
| CVE-2016-4432 | Important | 6.0.2 and earlier | 6.0.3 | Authentication bypass |
| CVE-2016-8741 | Moderate | 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, and 6.1.0 | 6.0.6, 6.1.1 | Information leakage |
| CVE-2017-15701 | Important | 6.1.0, 6.1.1, 6.1.2, 6.1.3, and 6.1.4 | 6.1.5 | Denial of Service |
| CVE-2017-15702 | Important | 0.18, 0.20, 0.22, 0.24, 0.26, 0.28, 0.30, and 0.32 | 6.0.0 | Authentication vulnerability |
| CVE-2018-1298 | Important | 7.0.0 | 7.0.1 | Denial of Service |
| CVE-2018-8030 | Important | 7.0.0, 7.0.1, 7.0.2, 7.0.3 and 7.0.4 | 7.0.5 | Denial of Service |
| CVE-2019-0200 | Important | 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7, 6.0.8, 6.1.0, 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.1.5, 6.1.6, 6.1.7, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6 and 7.1.0 | 7.0.7, 7.1.1 | Denial of Service |
| CVE-2026-68060 | Important | 10.0.1 and earlier | 10.1.0 | Type size/count handling can lead to excessive allocation pre-authentication |
| CVE-2026-68073 | Important | 10.0.1 and earlier | 10.1.0 | Unbounded type nesting can lead to pre-authentication stack overflow |
| CVE-2026-68074 | Important | 10.0.1 and earlier | 10.1.0 | Unbounded symbol value caching can lead to pre-authentication resource exhaustion |
| CVE-2026-68075 | Important | 10.0.1 and earlier | 10.1.0 | Incoming session flow control window can be exceeded |
| CVE-2026-68077 | Important | 10.0.1 and earlier | 10.1.0 | Unbounded disposition range handling can lead to denial of service |
| CVE-2026-68078 | Important | 10.0.1 and earlier | 10.1.0 | Unable to govern the maximum number of transfer frames per incoming delivery |
| CVE-2026-68080 | Important | 10.0.1 and earlier | 10.1.0 | Unbounded echo flow responses can lead to denial of service |
See the main security page for general information and details for other components.
Apache Qpid, Messaging built on AMQP; Copyright © 2015 The Apache Software Foundation; Licensed under the Apache License, Version 2.0; Apache Qpid, Qpid, Qpid Proton, Proton, Apache, the Apache feather logo, and the Apache Qpid project logo are trademarks of The Apache Software Foundation; All other marks mentioned may be trademarks or registered trademarks of their respective owners