rabbitmq rabbitmq-java-client

• CVE-2026-106123 Medium 5.7 RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() 0.2%
• CVE-2026-106122 Medium 6.0 RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers 0.5%
• CVE-2026-106121 Medium 4.9 RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS 0.5%
• CVE-2026-75516 High 8.7 RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement 0.6%
• CVE-2026-61634 None 0.0 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max 0.5%
• CVE-2026-63336 Medium 5.1 RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM 0.3%
• CVE-2026-63337 High 7.5 RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading 0.6%
• CVE-2026-69220 High 8.7 RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS 0.7%
• CVE-2026-69219 High 8.7 RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation 0.7%
• CVE-2026-63335 Medium 6.3 RabbitMQ Java client malformed body frame triggers raw command assembler exception 0.5%
• CVE-2023-46120 Medium 4.9 RabbitMQ Java client's lack of message size limitation leads to remote DoS attack 1.3%