CVE-2026-67554

The record

An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes the issue.

Affected packages

Related vulnerabilities

• CVE-2026-118037 In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027… CWE-606
• CVE-2026-93653 A denial of service flaw was found in Poppler's Splash backend. CWE-606
• CVE-2026-85730 smol-toml is a small, fast, and correct TOML parser and serializer. CWE-606
• CVE-2026-13761 Pega Platform versions 7.1.0 through 25.1.2 are affected by an improper validation of… CWE-606
• CVE-2026-16599 GNU wget is vulnerable to denial of service in its FTP OPIE/S-KEY authentication… CWE-606
• CVE-2026-62901 Unchecked input for loop condition in .NET allows an unauthorized attacker to deny… CWE-606
• CVE-2026-71439 Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify… CWE-606
• CVE-2026-68077 An authenticated attacker can craft a disposition frame with large or illegal ranges… CWE-606