com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

com.github.marcelop3251:queues-manager (1.2.0), com.rabbitmq.jms:rabbitmq-jms (>=1.13.0, <=1.14.0) +9 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.11.3)

com.rabbitmq:amqp-client MAVEN version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.marcelop3251:queues-manager 1.2.0 - com.rabbitmq.jms:rabbitmq-jms =1.13.0, =1.3.15-1, =2.10.2,...

com.github.libgraviton:worker-base (>=0.2.0, <=0.14.0), io.scalac:reactive-rabbit_2.11 (0.1.0) +21 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.3.5)

com.rabbitmq:amqp-client MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.libgraviton:worker-base =0.2.0, =0.4.2, =0.5.0 - org.apache.airavata:airavata-gfac-core 0.14 -...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.11.0, <=0.13.1), org.iplantc.core:metadactyl (1.8.4) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.1.0)

com.rabbitmq:amqp-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.11.0, =0.13.1 - org.iplantc.core:metadactyl 1.8.4 Source cves...

com.automationrockstars:bmo-event-processor (>=2.0.1, <=2.0.3), com.automationrockstars:gir (>=2.0.1, <=2.0.3) +18 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.8.0)

com.rabbitmq:amqp-client MAVEN version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =1.0.0, =3.2.0-689,...

org.apache.beam:beam-sdks-java-io-rabbitmq (>=2.13.0, <=2.17.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.9.3)

com.rabbitmq:amqp-client MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.beam:beam-sdks-java-io-rabbitmq =2.13.0, =2.17.0 Source cves: CVE-2026-61634 Source advisory:...

com.github.xuwei-k:usagi_2.10 (0.1.1), com.github.xuwei-k:usagi_2.11 (0.1.1) +27 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.5.5)

com.rabbitmq:amqp-client MAVEN version 3.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.xuwei-k:usagi2.10 0.1.1 - com.github.xuwei-k:usagi2.11 0.1.1 - org.moskito:moskito-central-rest-weba...

com.bluelock:camel-spring-amqp (1.7.0), gr.iti.mklab:mklab-stream-manager (0.2.1) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.2)

com.rabbitmq:amqp-client MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - gr.iti.mklab:mklab-stream-manager 0.2.1 -...

com.rabbitmq.jms:rabbitmq-jms (>=1.15.0, <=1.15.2), com.smoketurner.dropwizard:zipkin-core (2.0.16-1) +101 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.12.0)

com.rabbitmq:amqp-client MAVEN version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms =1.15.0, =2.4.2.0-17, =2.4.2.0-17, =2.4.2.0-17, =4.1.3, =4.1.3, =4.1.3, =4.1.3,...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.0.3-1, <=1.0.4-2), com.daedafusion:events-rabbitmq (1.0) +5 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.4)

com.rabbitmq:amqp-client MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.0.3-1, =3.0.0, =2.1.0-rc1, =2.1.0-rc1, =2.1.0-rc1, =2.3.3 Sour...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.4.6, <=2.6.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.4.6, <=2.6.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.4.2)

com.rabbitmq:amqp-client MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.4.6, =2.4.6, =2.6.1 Source cves: CVE-2026-61634 Sourc...

com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.7.1)

com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...

RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.5.3-2, <=1.5.4-8), com.devebot.opflow:opflow-core (>=0.1.4, <=0.1.21) +50 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.1.0)

com.rabbitmq:amqp-client MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.5.3-2, =0.1.4, =0.1.0, =0.5, =0.5, =0.1-m1, =0.1-m1, =5.3.0.12...

org.elasticsearch:elasticsearch-river-rabbitmq (1.5.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.0)

com.rabbitmq:amqp-client MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.5.0 Source cves: CVE-2026-61634 Source advisory:...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

com.smoketurner.dropwizard:zipkin-core (>=1.3.8-1, <=1.3.9-1), io.dropwizard.metrics:metrics-graphite (4.1.0-rc3) +5 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (4.9.1)

com.rabbitmq:amqp-client MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.8-1, =2.0.0-rc0+test8, =2.11.9, =2.7.12, =2.7.12, =2.11.9, =2.12.0...