RA
Product
rabbitmq-java-client
10
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add rabbitmq-java-client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75516 | 8.7 | Sep 16 | RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement Affected: < 5.34.0 |
| CVE-2026-69220 | 8.7 | Aug 18 | RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS Affected: < 5.33.1 |
| CVE-2026-69219 | 8.7 | Aug 18 | RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation Affected: < 5.33.1 |
| CVE-2026-106122 | 7.5 | Oct 6 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers Affected: < 5.36.0 |
| CVE-2026-106121 | 7.5 | Oct 6 | RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS Affected: < 5.36.1 |
| CVE-2026-63337 | 7.5 | Aug 18 | RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading Affected: < 5.33.0 |
| CVE-2026-63335 | 6.3 | Aug 18 | RabbitMQ Java client malformed body frame triggers raw command assembler exception Affected: < 5.31.0 |
| CVE-2026-106123 | 5.5 | Oct 6 | RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() Affected: < 5.35.0 |
| CVE-2026-63336 | 5.1 | Aug 18 | RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM Affected: < 5.33.0 |
| CVE-2026-61634 | 0.0 | Aug 18 | RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max Affected: < 5.33.0 |
Showing 10