com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.0.3-1, <=1.0.4-2), com.daedafusion:events-rabbitmq (1.0) +5 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.4.4)

com.rabbitmq:amqp-client MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.0.3-1, =3.0.0, =2.1.0-rc1, =2.1.0-rc1, =2.1.0-rc1, =2.3.3 Sour...

com.automationrockstars:gunter-rabbit (>=1.0.2, <=2.0.3), com.rabbitmq.jms:rabbitmq-jms (1.4.7) +4 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.6.2)

com.rabbitmq:amqp-client MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:gunter-rabbit =1.0.2, =1.1.1, =3.3.0.cr1, =3.3.0.cr1, =2.1.0-alpha.1, =2.1.0-alpha.2...

com.al333z:bunny_2.11 (>=0.0.3, <=0.0.4), com.al333z:bunny_2.12 (>=0.0.1, <=0.0.4) +75 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.0.0)

com.rabbitmq:amqp-client MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.al333z:bunny2.11 =0.0.3, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.3.0, =1.3.2 -...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +98 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.6.3)

com.rabbitmq:amqp-client MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core 0.1.0 - br.jus.stf.digital:test =1.0.0-rc, =1.1.4-release, =1.1.4-release,...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), cn.hyperchain.javasdk:hyperchainsdk (>=4.2.1, <=4.2.3) +123 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.0.2)

com.rabbitmq:amqp-client MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =2.0.0, =4.2.1, =1.1.0, =0.10, =0.10, =1.2.0, =1.2.0, =0.10, =0.10, =1.0.0-rc1,...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.3) +3388 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (>=5.0.0, <=5.32.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-63337 Source advisory: OSV:GHSA-6G32-PXV4-2WFJ...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.3) +3388 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (>=5.0.0, <=5.32.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-63337 Source advisory: GHSA-6G32-PXV4-2WFJ...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.4.6, <=2.6.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.4.6, <=2.6.1) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.4.2)

com.rabbitmq:amqp-client MAVEN version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.4.6, =2.4.6, =2.6.1 Source cves: CVE-2026-63337 Sourc...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.7.0, <=2.7.1), io.zipkin.java:zipkin-collector-rabbitmq (>=2.7.0, <=2.7.1) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.5.0)

com.rabbitmq:amqp-client MAVEN version 4.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.7.0, =2.7.0, =2.7.1 Source cves: CVE-2026-63337 Sourc...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The JSON-RPC tools in com.rabbitmq.tools.jsonrpc perform Class.forNamejavaReturnType with initialize=true on class names received from untrusted AMQP messages, without any validation or allowlist. Vulnerable code ProcedureDescription.java:101-127: When a JsonRpcClient connects, it calls...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +173 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.0.3)

com.rabbitmq:amqp-client MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =1.0.0, =1.0.0, =9.00.2110.07.220316, =1.0.1, =1.0.0, =1.3.6.2,...

com.github.gitssie:play-rabbitmq_2.12 (2.6.6), com.hellosoda.rmq:rmq-core_2.11 (>=1.0.7, <=1.0.9) +9 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.1.1)

com.rabbitmq:amqp-client MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.gitssie:play-rabbitmq2.12 2.6.6 - com.hellosoda.rmq:rmq-core2.11 =1.0.7, =1.0.7, =1.0-alpha5, =0.0.7...

com.activitystream:as-sdk (>=0.1.13, <=0.1.25), com.alibaba.blink:flink-connector-rabbitmq_2.11 (>=blink-3.2.0, <=1.5.1) +25 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.2.0)

com.rabbitmq:amqp-client MAVEN version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.activitystream:as-sdk =0.1.13, =blink-3.2.0, =1.2, =1.2, =0.0.2.10, =1.4.0, =1.4.0, =1.0-beta5, =1.1.1 -...

com.rabbitmq:perf-test (>=1.4.0, <=1.4.2), com.sportradar.mts.sdk.app:mts-sdk-app (>=2.3.6.0-1, <=2.4.1.2) +6 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.2.2)

com.rabbitmq:amqp-client MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq:perf-test =1.4.0, =2.3.6.0-1, =2.3.6.0-1, =2.3.6.0-1, =0.1.5, =2.1.0, =2.1.0, =2.1.0, =2.1.4 Sourc...

com.meltwater:rxrabbit (1.3.0), com.rabbitmq.jms:rabbitmq-jms (>=1.8.0, <=1.8.1) +6 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.3.0)

com.rabbitmq:amqp-client MAVEN version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.meltwater:rxrabbit 1.3.0 - com.rabbitmq.jms:rabbitmq-jms =1.8.0, =2.2.2, =2.2.2, =2.2.0, =2.2.0, =1.0.14,...

com.devebot.opflow:opflow-core (>=0.1.22, <=0.1.23), com.github.gvolpe:fs2-rabbit-circe_2.11 (>=0.6, <=1.0-rc1) +17 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.6.0)

com.rabbitmq:amqp-client MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.devebot.opflow:opflow-core =0.1.22, =0.6, =0.6, =0.6, =0.6, =1.3.2-1, =2.7.2, =2.7.2, =2.8.4 and more Sourc...

com.rabbitmq.jms:rabbitmq-jms (1.10.0), com.smoketurner.dropwizard:zipkin-core (1.3.7-1) +8 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.8.1)

com.rabbitmq:amqp-client MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.10.0 - com.smoketurner.dropwizard:zipkin-core 1.3.7-1 -...