com.github.athieriot:jtaches (>=1.2, <=1.3), com.zanox.lib.rabbiteasy:rabbiteasy-cdi (>=1.0.1, <=1.2.0) +13 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.7)

com.rabbitmq:amqp-client MAVEN version 2.8.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.athieriot:jtaches =1.2, =1.0.1, =1.0.1, =1.0.1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m1, =0.5.0-m...

com.github.sstone:akka-amqp-proxies_2.10 (>=1.1-rc1, <=1.3), com.github.sstone:akka-amqp-proxies_2.10.1 (1.2) +1 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.0.1)

com.rabbitmq:amqp-client MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 =1.1-rc1, =1.1-rc1, =1.1 Source cves: CVE-2026-61634 Source advisory:...

org.elasticsearch:elasticsearch-river-rabbitmq (1.5.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.0)

com.rabbitmq:amqp-client MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.5.0 Source cves: CVE-2026-61634 Source advisory:...

com.github.sstone:amqp-client_2.10 (1.2), mx.bigdata.utils:amqp-utils (1.2.1) +3 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.1)

com.rabbitmq:amqp-client MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.2 - mx.bigdata.utils:amqp-utils 1.2.1 - org.atmosphere:atmosphere-rabbitmq...

org.apache.airavata:airavata-api-server (>=0.12, <=0.14), org.apache.airavata:airavata-client-api (>=0.9, <=0.14) +30 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.2)

com.rabbitmq:amqp-client MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.airavata:airavata-api-server =0.12, =0.9, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12,...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.3) +3388 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (>=5.0.0, <=5.32.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-61634 Source advisory: OSV:GHSA-5XWG-CFVJ-GFF5...

GHSA-5XWG-CFVJ-GFF5 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

Summary The max body size was enforced to patch CVE-2023-46120, but even though that limit still works, the frame size itself still exceeds the given max size. Root cause The Java client records the AMQP 0-9-1 framemax negotiated during connection tuning, but the socket inbound frame reader...

com.threerings:ooo-messaging (1.1), net.liftmodules:amqp_2.10 (>=2.5-m4-1.2, <=2.5-rc4-1.2) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (1.7.2)

com.rabbitmq:amqp-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.threerings:ooo-messaging 1.1 - net.liftmodules:amqp2.10 =2.5-m4-1.2, =2.5-m1-1.1, =2.5-m1-1.1, =2.5-m1-1.1,...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2026-61634 Source advisor...

org.elasticsearch:elasticsearch-river-rabbitmq (1.1.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.7.0)

com.rabbitmq:amqp-client MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.1.0 Source cves: CVE-2026-61634 Source advisory:...

com.nesscomputing.components:ness-amqp (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (2.8.5)

com.rabbitmq:amqp-client MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.nesscomputing.components:ness-amqp =1.0.0, =1.1.0 Source cves: CVE-2026-61634 Source advisory:...

eu.socialsensor:socialsensor-framework-client (0.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.0.0)

com.rabbitmq:amqp-client MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - eu.socialsensor:socialsensor-framework-client 0.1 Source cves: CVE-2026-61634 Source advisory:...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-61634 Source advisory:...

com.github.pukkaone:logback-gelf (>=1.1.5, <=1.1.9), com.globo.graylog2:gelfj (>=1.1.16.0, <=1.1.16.1) +13 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.0.4)

com.rabbitmq:amqp-client MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.pukkaone:logback-gelf =1.1.5, =1.1.16.0, =2.0.0, =1.1.3, =1.2, =1.2, =1.5 Source cves: CVE-2026-6163...

com.jasonclawson:rabbitmq-ha-client (>=0.5.0, <=0.5.2), com.m3958.vertxprj:applogvertx (0.0.1) +4 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.1.4)

com.rabbitmq:amqp-client MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.jasonclawson:rabbitmq-ha-client =0.5.0, =0.3.0, =0.0.2, =0.0.4 Source cves: CVE-2026-61634 Source advisory:...

me.breidenbach:rabbitex (1.2) potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.2.0)

com.rabbitmq:amqp-client MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - me.breidenbach:rabbitex 1.2 Source cves: CVE-2026-61634 Source advisory: OSV:GHSA-5XWG-CFVJ-GFF5...

com.github.sstone:akka-amqp-proxies_2.10 (1.4-ml1), com.github.sstone:amqp-client_2.10 (>=1.3-ml1, <=1.4-ml4) +4 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.2.1)

com.rabbitmq:amqp-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 1.4-ml1 - com.github.sstone:amqp-client2.10 =1.3-ml1, =0.9.0, =0.7.0,...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

com.bluelock:camel-spring-amqp (1.7.0), gr.iti.mklab:mklab-stream-manager (0.2.1) +15 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (3.4.2)

com.rabbitmq:amqp-client MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - gr.iti.mklab:mklab-stream-manager 0.2.1 -...