{"action":"Upgrade org.apache.activemq:activemq-all to 5.19.2 (5.19.x), 6.1.9 (6.1.x) or 6.2.1 (6.2.x) or later.","affected":[{"fixed":"5.19.2","introduced":"0"},{"fixed":"6.1.9","introduced":"6.0.0"},{"fixed":"6.2.1","introduced":"6.2.0"}],"component":"org.apache.activemq:activemq-all","cve_ids":["CVE-2025-66168"],"ecosystem":"Maven","epss":0.00794,"exploited":false,"fixed_versions":["5.19.2","6.1.9","6.2.1"],"ghsa_id":"GHSA-c825-6ph3-4h84","id":"tcs_01M5N8RW9FS45YEF0C1M51RYZE","modified_at":"2026-09-10T03:50:38.840053597Z","published_at":"2026-03-04T09:31:07Z","references":["https://osv.dev/vulnerability/GHSA-c825-6ph3-4h84","https://nvd.nist.gov/vuln/detail/CVE-2025-66168","https://activemq.apache.org/security-advisories.data/CVE-2026-40046-announcement.txt","https://github.com/apache/activemq","https://lists.apache.org/thread/13n8mkrb2jf2y6yyhpgrkmpqcm7djyto","https://www.cve.org/CVERecord?id=CVE-2026-40046","http://www.openwall.com/lists/oss-security/2026/03/03/5"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-c825-6ph3-4h84#Maven/org.apache.activemq:activemq-all","url":"https://osv.dev/vulnerability/GHSA-c825-6ph3-4h84"}],"summary":"Apache ActiveMQ is Vulnerable to Integer Overflow or Wraparound"}