eu.socialsensor:socialsensor-framework-client (0.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.0.0)

com.rabbitmq:amqp-client MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - eu.socialsensor:socialsensor-framework-client 0.1 Source cves: CVE-2026-61634 Source advisory:...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...

io.motown.domain:domain-utils (0.8.2), io.motown.ocpp:ocpp-soap-utils (0.8.2) +7 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.2.3)

com.rabbitmq:amqp-client MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.motown.domain:domain-utils 0.8.2 - io.motown.ocpp:ocpp-soap-utils 0.8.2 - io.motown.ocpp:ocpp-v12-soap 0.8.2...

org.apache.airavata:airavata-api-server (>=0.12, <=0.14), org.apache.airavata:airavata-client-api (>=0.9, <=0.14) +30 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.2)

com.rabbitmq:amqp-client MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.airavata:airavata-api-server =0.12, =0.9, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12,...

com.threerings:ooo-messaging (1.1), net.liftmodules:amqp_2.10 (>=2.5-m4-1.2, <=2.5-rc4-1.2) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (1.7.2)

com.rabbitmq:amqp-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.threerings:ooo-messaging 1.1 - net.liftmodules:amqp2.10 =2.5-m4-1.2, =2.5-m1-1.1, =2.5-m1-1.1, =2.5-m1-1.1,...

net.leanix:leanix-dropkit (>=0.7.4, <=1.3.21), net.leanix:leanix-dropkit-persistence (>=1.0.0, <=1.1.6) +6 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.0)

com.rabbitmq:amqp-client MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.leanix:leanix-dropkit =0.7.4, =1.0.0, =1.6.4, =1.7.14 - net.liftmodules:amqp3.02.11 1.4.0 -...

com.bluelock:camel-spring-amqp (1.7.0), gr.iti.mklab:mklab-stream-manager (0.2.1) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.2)

com.rabbitmq:amqp-client MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - gr.iti.mklab:mklab-stream-manager 0.2.1 -...

org.elasticsearch:elasticsearch-river-rabbitmq (1.1.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.7.0)

com.rabbitmq:amqp-client MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.1.0 Source cves: CVE-2026-61634 Source advisory:...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.4.6, <=2.6.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.4.6, <=2.6.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.4.2)

com.rabbitmq:amqp-client MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.4.6, =2.4.6, =2.6.1 Source cves: CVE-2026-61634 Sourc...

com.rabbitmq.jms:rabbitmq-jms (1.12.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.11.2)

com.rabbitmq:amqp-client MAVEN version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.12.0 Source cves: CVE-2026-61634 Source advisory: OSV:GHSA-5XWG-CFVJ-GFF5...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...

GHSA-5XWG-CFVJ-GFF5 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...

com.github.cloudbow:rmq-publisher (>=0.0.1, <=0.0.6), io.latent:storm-rabbitmq (1.0.0) +3 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.0)

com.rabbitmq:amqp-client MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cloudbow:rmq-publisher =0.0.1, =2.3.0, =2.3.0, =2.4.5 - ru.kiryam:storm-rabbitmq 0.6.2 Source cves:...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.11.0, <=0.13.1), org.iplantc.core:metadactyl (1.8.4) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.1.0)

com.rabbitmq:amqp-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.11.0, =0.13.1 - org.iplantc.core:metadactyl 1.8.4 Source cves...

com.codacy:metrics-dropwizard_2.11 (>=1.0.33, <=3.1.2), com.codacy:metrics-dropwizard_2.12 (>=1.0.33, <=3.1.2) +428 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.4.1)

com.rabbitmq:amqp-client MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.codacy:metrics-dropwizard2.11 =1.0.33, =1.0.33, =3.1.0, =1.30.0, =1.29.0, =1.29.0, =1.2.0, =v0.0.5, =v0.0.5...

com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14), com.github.cycladessoa.nyxlets:log (>=1.0.0.3, <=1.0.0.31) +8 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.6)

com.rabbitmq:amqp-client MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cycladessoa.nyxlets:exec =1.0.0.1, =1.0.0.3, =1.0.0.1, =1.0.0.3, =1.0.0.2, =1.0.0.1, =1.0.0.3,...

com.meltwater:rxrabbit (1.3.0), com.rabbitmq.jms:rabbitmq-jms (>=1.8.0, <=1.8.1) +6 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.3.0)

com.rabbitmq:amqp-client MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.meltwater:rxrabbit 1.3.0 - com.rabbitmq.jms:rabbitmq-jms =1.8.0, =2.2.2, =2.2.2, =2.2.0, =2.2.0, =1.0.14,...

com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

com.github.libgraviton:worker-base (>=0.2.0, <=0.14.0), io.scalac:reactive-rabbit_2.11 (0.1.0) +21 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.3.5)

com.rabbitmq:amqp-client MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.libgraviton:worker-base =0.2.0, =0.4.2, =0.5.0 - org.apache.airavata:airavata-gfac-core 0.14 -...