{"action":"Upgrade org.apache.artemis:artemis-stomp-protocol to 2.54.0 or later.","affected":[{"fixed":"2.54.0","introduced":"2.50.0"},{"introduced":"2.0.0","last_affected":"2.44.0"}],"component":"org.apache.artemis:artemis-stomp-protocol","cve_ids":["CVE-2026-40914"],"ecosystem":"Maven","epss":0.00372,"exploited":false,"fixed_versions":["2.54.0"],"ghsa_id":"GHSA-rf99-f9j2-gv3f","id":"tcs_01M5N9BPQKDH2HW4G2S5X3SZSZ","modified_at":"2026-09-10T03:50:47.380488187Z","published_at":"2026-05-28T15:39:50Z","references":["https://osv.dev/vulnerability/GHSA-rf99-f9j2-gv3f","https://nvd.nist.gov/vuln/detail/CVE-2026-40914","https://github.com/apache/artemis/pull/6395","https://github.com/apache/artemis/commit/53173375c4d5e4b57890e89d37ed8b666c974474","https://github.com/apache/artemis","https://issues.apache.org/jira/browse/ARTEMIS-5996","https://lists.apache.org/thread/6q3st8dlorz2q05svqn11k1xl7jkmm4c","http://www.openwall.com/lists/oss-security/2026/05/27/8"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-rf99-f9j2-gv3f","url":"https://osv.dev/vulnerability/GHSA-rf99-f9j2-gv3f"}],"summary":"Apache Artemis has an Incorrect Authorization issue"}