Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.activemq/activemq-all@5.19.5
purl pkg:maven/org.apache.activemq/activemq-all@5.19.5
Next non-vulnerable version 5.19.7
Latest non-vulnerable version 6.2.6
Risk score 4.0
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-w3w2-mpp5-92gm
Aliases:
CVE-2026-40466
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code …
5.19.6
Vulnerable
GHSA-2jp3-2923-9h52
Aliases:
CVE-2026-41043
Apache ActiveMQ Vulnerable to Cross-site Scripting Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in …
5.19.6
Vulnerable
GHSA-mr6m-xj7v-3cv3
Aliases:
CVE-2026-41044
Apache ActiveMQ Vulnerable to Code Injection Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache …
5.19.6
Vulnerable
GHSA-v853-w46p-fv2h
Aliases:
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation …
5.19.7
Not vulnerable
GHSA-hg6c-8mvr-jqc9
Aliases:
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue Improper Input Validation, Improper Control of Generation …
5.19.7
Not vulnerable
GHSA-hf52-78x8-6w3w
Aliases:
CVE-2026-49270
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability Exposure of Sensitive …
5.19.7
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-rxpj-7qvf-xv32
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans Improper Input Validation, Improper Control of … CVE-2026-34197