Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.qpid/proton-j@0.22.0
purl pkg:maven/org.apache.qpid/proton-j@0.22.0
Next non-vulnerable version 0.35.0
Latest non-vulnerable version 0.35.0
Risk score 3.4
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2018-17187

The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by use of the 'transport.ssl(...)' methods. …
0.30.0
Vulnerable
0.31.0
Vulnerable
0.32.0
Vulnerable
0.33.0
Vulnerable
0.33.1
Vulnerable
0.33.2
Vulnerable
0.33.3
Vulnerable
0.33.4
Vulnerable
0.33.5
Vulnerable
0.33.6
Vulnerable
0.33.8
Vulnerable
GHSA-5h6x-m52p-23ph
Aliases:
CVE-2019-0223
Withdrawn Advisory: Improper Certificate Validation in Apache Qpid Proton ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability …
0.27.1
Vulnerable
GHSA-xvch-r4wf-h8w9
Aliases:
CVE-2018-17187
Improper Certificate Validation in proton-j The Apache Qpid Proton-J transport includes an optional wrapper layer to perform TLS, enabled by …
0.30.0
Vulnerable
0.30.0
Vulnerable
0.30.0
Vulnerable
GHSA-p2gc-fm5w-94jj
Aliases:
CVE-2026-66274
Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow A pre-authentication attacker could leverage type nesting to cause …
0.35.0
Not vulnerable
This package is not known to fix any advisories.