org.elasticsearch:elasticsearch-river-rabbitmq (1.1.0) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.7.0)

com.rabbitmq:amqp-client MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.1.0 Source cves: CVE-2026-63335 Source advisory:...

com.espertech:esperio-amqp (>=4.6.0, <=7.1.0), io.brooklyn.example:brooklyn-example-global-web-fabric (0.4.0) +9 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (2.7.1)

com.rabbitmq:amqp-client MAVEN version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.espertech:esperio-amqp =4.6.0, =7.1.0 - io.brooklyn.example:brooklyn-example-global-web-fabric 0.4.0 -...

eu.socialsensor:socialsensor-framework-client (0.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.0.0)

com.rabbitmq:amqp-client MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - eu.socialsensor:socialsensor-framework-client 0.1 Source cves: CVE-2026-63335 Source advisory:...

com.github.sstone:akka-amqp-proxies_2.10 (>=1.1-rc1, <=1.3), com.github.sstone:akka-amqp-proxies_2.10.1 (1.2) +1 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.0.1)

com.rabbitmq:amqp-client MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 =1.1-rc1, =1.1-rc1, =1.1 Source cves: CVE-2026-63335 Source advisory:...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-63335 Source advisory:...

com.github.sstone:amqp-client_2.10 (1.2), mx.bigdata.utils:amqp-utils (1.2.1) +3 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.1.1)

com.rabbitmq:amqp-client MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.2 - mx.bigdata.utils:amqp-utils 1.2.1 - org.atmosphere:atmosphere-rabbitmq...

com.github.sstone:akka-amqp-proxies_2.10 (1.4-ml1), com.github.sstone:amqp-client_2.10 (>=1.3-ml1, <=1.4-ml4) +4 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.2.1)

com.rabbitmq:amqp-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 1.4-ml1 - com.github.sstone:amqp-client2.10 =1.3-ml1, =0.9.0, =0.7.0,...

be.looorent:jflu-producer-rabbitmq (>=0.1, <=0.13.6), be.looorent:jflu-store (>=0.1, <=0.13.6) +103 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.6.5)

com.rabbitmq:amqp-client MAVEN version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - be.looorent:jflu-producer-rabbitmq =0.1, =0.1, =0.1, =1.0.6.oss, =1.0.6.oss, =0.4.2, =0.4.2, =0.4.2, =0.4.2,...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), cn.hyperchain.javasdk:hyperchainsdk (>=4.2.1, <=4.2.3) +123 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.0.2)

com.rabbitmq:amqp-client MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =2.0.0, =4.2.1, =1.1.0, =0.10, =0.10, =1.2.0, =1.2.0, =0.10, =0.10, =1.0.0-rc1,...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.0.3-1, <=1.0.4-2), com.daedafusion:events-rabbitmq (1.0) +5 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.4.4)

com.rabbitmq:amqp-client MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.0.3-1, =3.0.0, =2.1.0-rc1, =2.1.0-rc1, =2.1.0-rc1, =2.3.3 Sour...

com.automationrockstars:bmo-event-processor (>=1.0.3, <=2.0.0), com.automationrockstars:gir (>=1.0.2, <=2.0.0) +16 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.5.4)

com.rabbitmq:amqp-client MAVEN version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =1.0.3, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =0.9.0, =2.16.0,...

com.bq.corbel.lib:rabbitmq (>=0.9.0, <=0.10.0), com.bq.corbel.lib:ws (>=0.20.0, <=0.23.0) +73 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (3.5.1)

com.rabbitmq:amqp-client MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.corbel.lib:rabbitmq =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.31.1, =1.31.1,...

GHSA-QX7J-JV8M-FPPR RabbitMQ Java client malformed body frame triggers raw command assembler exception

Summary RabbitMQ Java Client's inbound AMQP command assembly accepts a content header declaring a small body and then processes a larger body frame by throwing a raw UnsupportedOperationException from CommandAssembler. A broker peer that the client has connected to can use this malformed frame...

com.rabbitmq:perf-test (>=1.4.0, <=1.4.2), com.sportradar.mts.sdk.app:mts-sdk-app (>=2.3.6.0-1, <=2.4.1.2) +6 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.2.2)

com.rabbitmq:amqp-client MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq:perf-test =1.4.0, =2.3.6.0-1, =2.3.6.0-1, =2.3.6.0-1, =0.1.5, =2.1.0, =2.1.0, =2.1.0, =2.1.4 Sourc...

com.codacy:metrics-dropwizard_2.11 (>=1.0.33, <=3.1.2), com.codacy:metrics-dropwizard_2.12 (>=1.0.33, <=3.1.2) +428 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.4.1)

com.rabbitmq:amqp-client MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.codacy:metrics-dropwizard2.11 =1.0.33, =1.0.33, =3.1.0, =1.30.0, =1.29.0, =1.29.0, =1.2.0, =v0.0.5, =v0.0.5...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.4.6, <=2.6.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.4.6, <=2.6.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.4.2)

com.rabbitmq:amqp-client MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.4.6, =2.4.6, =2.6.1 Source cves: CVE-2026-63335 Sourc...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.7.0, <=2.7.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.7.0, <=2.7.1) potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.5.0)

com.rabbitmq:amqp-client MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.7.0, =2.7.0, =2.7.1 Source cves: CVE-2026-63335 Sourc...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-63335 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...