com.rabbitmq:perf-test (>=1.4.0, <=1.4.2), com.sportradar.mts.sdk.app:mts-sdk-app (>=2.3.6.0-1, <=2.4.1.2) +6 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.2.2)

com.rabbitmq:amqp-client MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq:perf-test =1.4.0, =2.3.6.0-1, =2.3.6.0-1, =2.3.6.0-1, =0.1.5, =2.1.0, =2.1.0, =2.1.0, =2.1.4 Sourc...

com.jasonclawson:rabbitmq-ha-client (>=0.5.0, <=0.5.2), com.m3958.vertxprj:applogvertx (0.0.1) +4 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.1.4)

com.rabbitmq:amqp-client MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.jasonclawson:rabbitmq-ha-client =0.5.0, =0.3.0, =0.0.2, =0.0.4 Source cves: CVE-2026-75516 Source advisory:...

org.apache.airavata:airavata-api-server (>=0.12, <=0.14), org.apache.airavata:airavata-client-api (>=0.9, <=0.14) +30 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.1.2)

com.rabbitmq:amqp-client MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.airavata:airavata-api-server =0.12, =0.9, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12,...

com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14), com.github.cycladessoa.nyxlets:log (>=1.0.0.3, <=1.0.0.31) +8 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.6)

com.rabbitmq:amqp-client MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cycladessoa.nyxlets:exec =1.0.0.1, =1.0.0.3, =1.0.0.1, =1.0.0.3, =1.0.0.2, =1.0.0.1, =1.0.0.3,...

com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

com.github.pukkaone:logback-gelf (>=1.1.5, <=1.1.9), com.globo.graylog2:gelfj (>=1.1.16.0, <=1.1.16.1) +13 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.0.4)

com.rabbitmq:amqp-client MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.pukkaone:logback-gelf =1.1.5, =1.1.16.0, =2.0.0, =1.1.3, =1.2, =1.2, =1.5 Source cves: CVE-2026-7551...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

GHSA-JH4V-GFQJ-7RHX RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement

Vulnerability In AMQConnection.java line 435-436, after Connection.Tune negotiation, the frame-max limit is set via: java frameHandler.setFrameMax Math.minthis.maxInboundMessageBodySize, frameMax; When frameMax = 0 meaning "unlimited" per AMQP spec, Math.min67108864, 0 = 0. This value is then...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.0-rc.2) +3373 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (>=5.0.0, <=5.33.1)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 - ai.platon.pulsar:browser4-seo 4.14.0-rc.2 and more Source cves: CVE-2026-75516 Source advisory: GHSA-JH4V-GFQJ-7RHX...

com.activitystream:as-sdk (>=0.1.13, <=0.1.25), com.alibaba.blink:flink-connector-rabbitmq_2.11 (>=blink-3.2.0, <=1.5.1) +25 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.2.0)

com.rabbitmq:amqp-client MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.activitystream:as-sdk =0.1.13, =blink-3.2.0, =1.2, =1.2, =0.0.2.10, =1.4.0, =1.4.0, =1.0-beta5, =1.1.1 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.1-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.1-release, <=1.1.3-release) +20 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.6.0)

com.rabbitmq:amqp-client MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release,...

com.threerings:ooo-messaging (1.1), net.liftmodules:amqp_2.10 (>=2.5-m4-1.2, <=2.5-rc4-1.2) +15 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (1.7.2)

com.rabbitmq:amqp-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.threerings:ooo-messaging 1.1 - net.liftmodules:amqp2.10 =2.5-m4-1.2, =2.5-m1-1.1, =2.5-m1-1.1, =2.5-m1-1.1,...

com.github.sstone:akka-amqp-proxies_2.10 (1.4-ml1), com.github.sstone:amqp-client_2.10 (>=1.3-ml1, <=1.4-ml4) +4 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.2.1)

com.rabbitmq:amqp-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 1.4-ml1 - com.github.sstone:amqp-client2.10 =1.3-ml1, =0.9.0, =0.7.0,...

com.abiquo:commons-amqp (>=3.1.0, <=3.2.0), com.github.sstone:amqp-client_2.10 (>=1.3, <=1.4) +11 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.3.1)

com.rabbitmq:amqp-client MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =3.1.0, =1.3, =1.0, =0.9.0, =1.0.0, =0.10.0, =0.7.0-incubating, =0.7.0-incubating,...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2026-75516 Source...

fastrepl-client (0.0.1) potentially affected by CVE-2026-59823 via litellm (0.4.4)

litellm PYPI version 0.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl-client 0.0.1 Source cves: CVE-2026-59823 Source advisory: OSV:GHSA-HX8V-G79F-8W5F...

valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

BIT-MONGODB-2026-18703 Improper Enforcement of Authentication Mechanism Restrictions in MongoDB Server Allows Use of Disabled Authentication Method

An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restrict authentication to other mechanisms. This could allow...