org.apache.beam:beam-sdks-java-io-rabbitmq (>=2.13.0, <=2.17.0) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.9.3)

com.rabbitmq:amqp-client MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.beam:beam-sdks-java-io-rabbitmq =2.13.0, =2.17.0 Source cves: CVE-2026-63335 Source advisory:...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.3) +3373 more potentially affected by CVE-2017-15699 +1 more via com.rabbitmq:amqp-client (>=5.0.0, <=5.30.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2017-15699, CVE-2026-63335 Source advisory: GHSA-QX7J-JV8M-FPPR...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-63335 Source advisory:...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...

com.sarehub:client (0.1.0), com.stratio.receiver:spark-rabbitmq (>=0.4.0, <=0.5.1) +40 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.6.6)

com.rabbitmq:amqp-client MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.sarehub:client 0.1.0 - com.stratio.receiver:spark-rabbitmq =0.4.0, =0.5.1 -...

com.ahome-it:ahome-tooling-server-core (>=1.1.1-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.1-release, <=1.1.3-release) +20 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.6.0)

com.rabbitmq:amqp-client MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release,...

com.github.gitssie:play-rabbitmq_2.12 (2.6.6), com.hellosoda.rmq:rmq-core_2.11 (>=1.0.7, <=1.0.9) +9 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.1.1)

com.rabbitmq:amqp-client MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.gitssie:play-rabbitmq2.12 2.6.6 - com.hellosoda.rmq:rmq-core2.11 =1.0.7, =1.0.7, =1.0-alpha5, =0.0.7...

com.nesscomputing.components:ness-amqp (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.8.5)

com.rabbitmq:amqp-client MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.nesscomputing.components:ness-amqp =1.0.0, =1.1.0 Source cves: CVE-2026-63335 Source advisory:...

com.smoketurner.dropwizard:zipkin-core (>=1.3.8-1, <=1.3.9-1), io.dropwizard.metrics:metrics-graphite (4.1.0-rc3) +5 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.9.1)

com.rabbitmq:amqp-client MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.8-1, =2.0.0-rc0+test8, =2.11.9, =2.7.12, =2.7.12, =2.11.9, =2.12.0...

net.lshift:accent (>=0.1, <=0.9.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.6.1)

com.rabbitmq:amqp-client MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.lshift:accent =0.1, =0.9.1 Source cves: CVE-2026-63335 Source advisory: OSV:GHSA-QX7J-JV8M-FPPR...

io.motown.domain:domain-utils (0.8.2), io.motown.ocpp:ocpp-soap-utils (0.8.2) +7 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.2.3)

com.rabbitmq:amqp-client MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.motown.domain:domain-utils 0.8.2 - io.motown.ocpp:ocpp-soap-utils 0.8.2 - io.motown.ocpp:ocpp-v12-soap 0.8.2...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.17.0, <=1.0.0) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.5.1)

com.rabbitmq:amqp-client MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.17.0, =1.0.0 Source cves: CVE-2026-63335 Source advisory:...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.16.0, <=0.16.5) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.3.1)

com.rabbitmq:amqp-client MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.16.0, =0.16.5 Source cves: CVE-2026-63335 Source advisory:...

com.bushidowallet:bushido-address-watcher (1.0.3), com.bushidowallet:bushido-wallet-service (1.0.3) +118 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.5.6)

com.rabbitmq:amqp-client MAVEN version 3.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher 1.0.3 - com.bushidowallet:bushido-wallet-service 1.0.3 -...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.rabbitmq.jms:rabbitmq-jms (1.12.0) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.11.2)

com.rabbitmq:amqp-client MAVEN version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.12.0 Source cves: CVE-2026-63335 Source advisory: OSV:GHSA-QX7J-JV8M-FPPR...

RabbitMQ Java client malformed body frame triggers raw command assembler exception

Summary RabbitMQ Java Client's inbound AMQP command assembly accepts a content header declaring a small body and then processes a larger body frame by throwing a raw UnsupportedOperationException from CommandAssembler. A broker peer that the client has connected to can use this malformed frame...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +98 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.6.3)

com.rabbitmq:amqp-client MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core 0.1.0 - br.jus.stf.digital:test =1.0.0-rc, =1.1.4-release, =1.1.4-release,...