Severity: important Affected versions:
- Apache Qpid Proton C through 0.40.0 Description: A message body that is deeply nested and decoded by pn_message_body() could overflow the stack and cause a crash. This issue affects Apache Qpid Proton C: through 0.40.0. Users are recommended to upgrade to version 0.41.1, which fixes the issue. This issue is being tracked as PROTON-2976 Credit: [email protected] (finder) Gjoko Krstic <[email protected]> (finder) References: https://qpid.apache.org/ https://www.cve.org/CVERecord?id=CVE-2026-105042 https://issues.apache.org/jira/browse/PROTON-2976
