com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.fluxcorp.plugins:rabbitmq-action (>=1.0.2, <=1.0.3), com.fluxcorp.plugins:rabbitmq-trigger (>=1.0.2, <=1.0.3) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.4.1)

com.rabbitmq:amqp-client MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.fluxcorp.plugins:rabbitmq-action =1.0.2, =1.0.2, =1.0.3 Source cves: CVE-2026-61634 Source advisory:...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

com.nesscomputing.components:ness-amqp (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.5)

com.rabbitmq:amqp-client MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.nesscomputing.components:ness-amqp =1.0.0, =1.1.0 Source cves: CVE-2026-61634 Source advisory:...

com.sarehub:client (0.1.0), com.stratio.receiver:spark-rabbitmq (>=0.4.0, <=0.5.1) +40 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.6.6)

com.rabbitmq:amqp-client MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.sarehub:client 0.1.0 - com.stratio.receiver:spark-rabbitmq =0.4.0, =0.5.1 -...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +98 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.6.3)

com.rabbitmq:amqp-client MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core 0.1.0 - br.jus.stf.digital:test =1.0.0-rc, =1.1.4-release, =1.1.4-release,...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.17.0, <=1.0.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.5.1)

com.rabbitmq:amqp-client MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.17.0, =1.0.0 Source cves: CVE-2026-61634 Source advisory:...

com.smoketurner.dropwizard:zipkin-core (>=1.3.12-1, <=1.3.12-4), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.8.3, <=2.10.1) +2 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.11.1)

com.rabbitmq:amqp-client MAVEN version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.12-1, =2.8.3, =2.8.3, =2.10.1 -...

org.elasticsearch:elasticsearch-river-rabbitmq (1.5.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.0)

com.rabbitmq:amqp-client MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.5.0 Source cves: CVE-2026-61634 Source advisory:...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +118 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.6)

com.rabbitmq:amqp-client MAVEN version 3.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 - com.bushidowallet:bushido-wallet-service 1.0.3 -...

net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

net.lshift:accent (>=0.1, <=0.9.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.6.1)

com.rabbitmq:amqp-client MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.lshift:accent =0.1, =0.9.1 Source cves: CVE-2026-61634 Source advisory: OSV:GHSA-5XWG-CFVJ-GFF5...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.5.3-2, <=1.5.4-8), com.devebot.opflow:opflow-core (>=0.1.4, <=0.1.21) +50 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.1.0)

com.rabbitmq:amqp-client MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.5.3-2, =0.1.4, =0.1.0, =0.5, =0.5, =0.1-m1, =0.1-m1, =5.3.0.12...

com.github.sstone:akka-amqp-proxies_2.10 (1.4-ml1), com.github.sstone:amqp-client_2.10 (>=1.3-ml1, <=1.4-ml4) +4 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.2.1)

com.rabbitmq:amqp-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 1.4-ml1 - com.github.sstone:amqp-client2.10 =1.3-ml1, =0.9.0, =0.7.0,...

flux:rabbitmq-action (>=1.0.0, <=1.0.1), flux:rabbitmq-trigger (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.2.0)

com.rabbitmq:amqp-client MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - flux:rabbitmq-action =1.0.0, =1.0.0, =1.0.3, =0.14.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.7.1, =5.7.1, =5.7.1,...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.0-rc.2) +3374 more potentially affected by CVE-2023-46120 +1 more via com.rabbitmq:amqp-client (>=5.0.0, <=5.32.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 - ai.platon.pulsar:browser4-seo 4.14.0-rc.2 and more Source cves: CVE-2023-46120, CVE-2026-61634 Source advisory:...