AM
Product
amqp091-go
12
CVEs
0
On KEV
9.5
Max CVSS
1
New 30D
Severity mix
Critical 3High 8Medium 1Low 0
Watch
Add amqp091-go to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77411 | 9.5 | Sep 16 | RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr Affected: < 1.13.0 |
| CVE-2026-77405 | 9.4 | Sep 16 | RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser Affected: < 1.13.0 |
| CVE-2026-77408 | 9.1 | Sep 16 | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow Affected: < 1.13.0 |
| CVE-2026-77412 | 8.9 | Sep 16 | RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client Affected: < 1.13.0 |
| CVE-2026-77410 | 8.9 | Sep 16 | RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation Affected: < 1.13.0 |
| CVE-2026-77403 | 8.9 | Sep 16 | RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation Affected: < 1.13.0 |
| CVE-2026-79921 | 8.9 | Aug 26 | amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload Affected: < 1.13.0 |
| CVE-2026-77404 | 8.7 | Sep 16 | RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection Affected: < 1.13.0 |
| CVE-2026-77409 | 8.2 | Sep 16 | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking Affected: < 1.13.0 |
| CVE-2026-77406 | 8.2 | Sep 16 | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration Affected: < 1.13.0 |
| CVE-2026-77407 | 7.0 | Sep 16 | RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields Affected: < 1.13.0 |
| CVE-2026-107386 | 6.3 | Oct 8 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KB Affected: >= 1.13.0, < 1.14.0 |
Showing 12