CVE-2026-42253

Medium

Advisory

Published 1 Jun 2026In the index since 8 Sept 2026

Apache ActiveMQ, Apache ActiveMQ Web have a Cross-site Scripting issue

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
activemq-webmaven	5.17.3, 5.18.7	5.19.7	2

2 by stars

Chart

Latest

Affected images

Radar Score

my-chartfleet-web-app

1 of the 6 container images this version deploys carry CVE-2026-42253.

Container image	Digest	Package	Fixed in
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	activemq-web@5.17.3	5.19.7

24,296

activemqmicroboxlabs

1 of the 1 container images this version deploys carry CVE-2026-42253.

Container image	Digest	Package	Fixed in
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	activemq-web@5.18.7	5.19.7

1,494

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
alfresco/alfresco-activemq :5.18.7-jre17-rockylinux8	5472f88d9b0b	activemq-web@5.18.7	5.19.7	1
richardchesterwood/k8s-fleetman-queue :release2	f7f8d5951155	activemq-web@5.17.3	5.19.7	1