As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-105042: Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash
Apache Qpid Proton C through version 0.40.0 contains an unbounded recursion vulnerability in its AMQP message body parsing function pn_message_body() that can cause a stack overflow and application crash when processing deeply nested message bodies. The vulnerability has been assigned CVE-2026-105042 and is tracked internally as PROTON-2976. Apache recommends upgrading to version 0.41.1 to remediate the issue.
Why it matters: Organizations running Apache Qpid Proton C up to 0.40.0 need to upgrade to 0.41.1 immediately to prevent denial of service attacks where malicious or malformed AMQP messages could crash message processing systems.
- Source published
- First seen by Cybersecurity Tracker