From 283f45d5c857391f0c6cfccba225f10a49571c41 Mon Sep 17 00:00:00 2001 From: Andrea Cosentino Date: Mon, 28 Sep 2026 09:06:41 +0200 Subject: [PATCH] [GHSA-vvvh-6236-74pm] Improper handling of property-encoding exceptions in AMQP... Co-Authored-By: Claude Opus 5 Signed-off-by: Andrea Cosentino --- .../GHSA-vvvh-6236-74pm.json | 31 +++++++++++++++++-- 1 file changed, 29 insertions(+), 2 deletions(-) diff --git a/advisories/unreviewed/2026/09/GHSA-vvvh-6236-74pm/GHSA-vvvh-6236-74pm.json b/advisories/unreviewed/2026/09/GHSA-vvvh-6236-74pm/GHSA-vvvh-6236-74pm.json index e8bf408ce974..fe5c16173fa4 100644 --- a/advisories/unreviewed/2026/09/GHSA-vvvh-6236-74pm/GHSA-vvvh-6236-74pm.json +++ b/advisories/unreviewed/2026/09/GHSA-vvvh-6236-74pm/GHSA-vvvh-6236-74pm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vvvh-6236-74pm", - "modified": "2026-09-25T18:31:21Z", + "modified": "2026-09-28T07:04:35Z", "published": "2026-09-25T09:31:08Z", "aliases": [ "CVE-2026-92608" @@ -13,7 +13,30 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.qpid:qpid-broker" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "10.1.1" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.1.0" + } + } + ], "references": [ { "type": "ADVISORY", @@ -26,6 +49,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/09/24/16" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/qpid-broker-j" } ], "database_specific": {