RA
Product
rabbitmq-java-client
10
CVEs
0
On KEV
8.7
Max CVSS
3
New 30D
Severity mix
Critical 0High 6Medium 3Low 0
Watch
Add rabbitmq-java-client to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75516 | 8.7 | Sep 16 | RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement Affected: < 5.34.0 |
| CVE-2026-69220 | 8.7 | Aug 18 | RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS Affected: < 5.33.1 |
| CVE-2026-69219 | 8.7 | Aug 18 | RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation Affected: < 5.33.1 |
| CVE-2026-106122 | 7.5 | Oct 6 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers Affected: < 5.36.0 |
| CVE-2026-106121 | 7.5 | Oct 6 | RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS Affected: < 5.36.1 |
| CVE-2026-63337 | 7.5 | Aug 18 | RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading Affected: < 5.33.0 |
Showing 6