21 Total advisories
21 Vulnerabilities
0 Malware
Dependency scanning
Check whether org.apache.activemq:activemq-client is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
HIGH 7.5
CVE-2026-50734
Apache ActiveMQ Client, Apache ActiveMQ, Apache ActiveMQ All has a Memory Allocation with Excessive Size Value vulnerability
HIGH 7.5
CVE-2026-53917
Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ Client, Apache ActiveMQ Broker have Memory Allocation with Excessive Size Value vulnerability
MEDIUM 4.3
CVE-2026-33227
Apache ActiveMQ: Improper validation and restriction of a classpath path name
HIGH 7.5
CVE-2026-39304
Apache ActiveMQ: Denial of Service via Out of Memory vulnerability
HIGH 7.5
CVE-2025-27533
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation
CRITICAL 9.8
CVE-2015-3208
Withdrawn Advisory: Improper Restriction of XML External Entity Reference in Apache ActiveMQ
CRITICAL 10.0
CVE-2023-46604
Apache ActiveMQ is vulnerable to Remote Code Execution
CRITICAL 9.8
CVE-2016-3088
Improper Input Validation in Apache ActiveMQ
UNKNOWN
CVE-2015-1830
Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ
UNKNOWN
CVE-2013-1879
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
UNKNOWN
CVE-2014-8110
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
UNKNOWN
CVE-2013-3060
Improper Authentication in Apache ActiveMQ
MEDIUM 6.1
CVE-2016-0734
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
MEDIUM 5.4
CVE-2016-0782
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
MEDIUM 6.1
CVE-2016-6810
Improper Neutralization of Input During Web Page Generation Apache ActiveMQ
HIGH 7.5
CVE-2019-0222
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
CRITICAL 9.8
CVE-2015-5254
Improper Input Validation in Apache ActiveMQ
CRITICAL 9.8
CVE-2014-3600
Improper Restriction of XML External Entity Reference in Apache ActiveMQ
HIGH 7.4
CVE-2018-11775
Improper Certificate Validation in Apache activemq-client
HIGH 7.5
CVE-2014-3576
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
MEDIUM 4.9
CVE-2015-7559
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
Browse more Maven advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes