https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 16:45:05 +0000 https://db.gcve.eu/vuln/cve-2026-108949 <p><strong>Affected:</strong> Apache Software Foundation Apache ActiveMQ, Apache Software Foundation ActiveMQ Broker</p> <p>Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker.</p> <p>An authenticated OpenWire client that sends a ConsumerInfo for a temporary queue/topic owned by another connection is rejected with InvalidDestinationException, but the rejected Subscription is left behind in the region&#39;s subscriptions map. Repeating the request leaks broker heap until OOM because the broker does not clean up the rejected subscriptions in the map.</p> <p>This issue affects Apache ActiveMQ: from 6.0.0 before 6.3.3, before 5.19.12; ActiveMQ Broker: from 6.0.0 before 6.3.3, before 5.19.12.</p> <p>Users are recommended to upgrade to version 6.4.0, 6.3.3, or 5.19.12, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache ActiveMQ, Apache Software Foundation ActiveMQ Broker</p> <p>Denial of Service via OOM vulnerability in Apache ActiveMQ, ActiveMQ Broker.</p> <p>An authenticated OpenWire client that sends a ConsumerInfo for a temporary queue/topic owned by another connection is rejected with InvalidDestinationException, but the rejected Subscription is left behind in the region&#39;s subscriptions map. Repeating the request leaks broker heap until OOM because the broker does not clean up the rejected subscriptions in the map.</p> <p>This issue affects Apache ActiveMQ: from 6.0.0 before 6.3.3, before 5.19.12; ActiveMQ Broker: from 6.0.0 before 6.3.3, before 5.19.12.</p> <p>Users are recommended to upgrade to version 6.4.0, 6.3.3, or 5.19.12, which fixes the issue.</p> https://db.gcve.eu/vuln/cve-2026-108949