15 Total advisories
15 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.apache.activemq:activemq-all is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
HIGH 7.5
CVE-2026-50750
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have a Denial of Service via Out of Memory vulnerability
HIGH 7.5
CVE-2026-50734
Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability
HIGH 7.5
CVE-2026-53917
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability
HIGH 7.5
CVE-2026-49434
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Improper Input Validation vulnerability
HIGH 8.8
CVE-2026-40466
Apache ActiveMQ Vulnerable to Improper Input Validation and Code Injection
HIGH 8.8
CVE-2026-45505
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
HIGH 8.1
CVE-2026-42588
Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ have a Code Injection issue
MEDIUM 5.9
CVE-2026-49270
Apache ActiveMQ Broker, Apache ActiveMQ, Apache ActiveMQ All have an Exposure of Sensitive Information Through Metadata vulnerability
HIGH 8.8
CVE-2026-34197
Authenticated Apache ActiveMQ Broker and Apache ActiveMQ users could perform RCE via Jolokia MBeans
HIGH 8.8
CVE-2026-41044
Apache ActiveMQ Vulnerable to Code Injection
MEDIUM 4.3
CVE-2026-33227
Apache ActiveMQ: Improper validation and restriction of a classpath path name
HIGH 7.5
CVE-2026-39304
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
MEDIUM 6.5
CVE-2026-41043
Apache ActiveMQ Vulnerable to Cross-site Scripting
MEDIUM 5.4
CVE-2025-66168
Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound
MEDIUM 5.4
CVE-2026-40046
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT vulnerable to Integer Overflow or Wraparound
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes