redhat/python3-qpid-proton vulnerabilities

Latest redhat/python3-qpid-proton CVEs

Newest publication first

1. CVE-2026-105042 Apache Qpid Proton C: Unbounded recursion in parsing AMQP message bodies can lead to crash

   Published 2026-10-29

   Critical·CVSS 9.8 EPSS 0.46%

   A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue.

2. CVE-2025-22873 Improper access to parent directory of root in os

   Published 2026-02-04

   Low·CVSS 3.8 EPSS 0.23%

   It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or f...

3. CVE-2025-61726 Memory exhaustion in query parameter parsing in net/url

   Published 2026-01-28

   High·CVSS 7.5 EPSS 2.3%

   The net/url package does not set a limit on the number of query parameters in a query. While the maximum size of query parameters in URLs is generally limited by the maximum request header size, the net/http.Request.ParseForm method can parse large URL-encoded forms. Parsing a la...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.