[ Vendor · 3 CVEs ]
com.rabbitmq
CVEs affecting com.rabbitmq published in the last 30 days, plus any com.rabbitmq CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-106121 | 6 Oct 2026 | CVSS 7.5 | RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoSThe RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0… | Fix |
| CVE-2026-106122 | 6 Oct 2026 | CVSS 7.5 | RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumersThe RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0… | Fix |
| CVE-2026-106123 | 6 Oct 2026 | CVSS 5.5 | RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0… | Fix |