Homepage

Improper Input Validation Affecting apache-activemq-6.2-compat package, versions <6.2.8-r0

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.88% (56th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-APACHEACTIVEMQ62COMPAT-19160463
  • published22 Aug 2026
  • disclosed28 Jul 2026
Report a new vulnerability Found a mistake?

Introduced: 28 Jul 2026

NewCVE-2026-59878  (opens in a new tab)
CWE-20  (opens in a new tab)

How to fix?

Upgrade Minimos:latest apache-activemq-6.2-compat to version 6.2.8-r0 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream apache-activemq-6.2-compat package and not the apache-activemq-6.2-compat package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ All.

A remote unauthenticated peer that can reach an exposed AMQP NIO connector can trigger denial-of-service behavior by sending a frame size value. This cause the NIO threads to die and if done rapidly enough can lead to exhaustion of the NIO thread pool denying service to other connections. This issue affects Apache ActiveMQ AMQP: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ: before 5.19.9, from 6.0.0 before 6.2.8; Apache ActiveMQ All: before 5.19.9, from 6.0.0 before 6.2.8.

Users are recommended to upgrade to version 5.19.9, 6.2.8, or 6.3.0 which fixes the issue.