com.sarehub:client (0.1.0), com.stratio.receiver:spark-rabbitmq (>=0.4.0, <=0.5.1) +40 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.6.6)

com.rabbitmq:amqp-client MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.sarehub:client 0.1.0 - com.stratio.receiver:spark-rabbitmq =0.4.0, =0.5.1 -...

com.abiquo:commons-amqp (>=3.1.0, <=3.2.0), com.github.sstone:amqp-client_2.10 (>=1.3, <=1.4) +11 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.3.1)

com.rabbitmq:amqp-client MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =3.1.0, =1.3, =1.0, =0.9.0, =1.0.0, =0.10.0, =0.7.0-incubating, =0.7.0-incubating,...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

com.github.xuwei-k:usagi_2.10 (0.1.1), com.github.xuwei-k:usagi_2.11 (0.1.1) +27 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.5.5)

com.rabbitmq:amqp-client MAVEN version 3.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.xuwei-k:usagi2.10 0.1.1 - com.github.xuwei-k:usagi2.11 0.1.1 - org.moskito:moskito-central-rest-weba...

be.looorent:jflu-producer-rabbitmq (>=0.1, <=0.13.6), be.looorent:jflu-store (>=0.1, <=0.13.6) +103 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.6.5)

com.rabbitmq:amqp-client MAVEN version 3.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - be.looorent:jflu-producer-rabbitmq =0.1, =0.1, =0.1, =1.0.6.oss, =1.0.6.oss, =0.4.2, =0.4.2, =0.4.2, =0.4.2,...

com.bq.corbel.lib:rabbitmq (>=0.9.0, <=0.10.0), com.bq.corbel.lib:ws (>=0.20.0, <=0.23.0) +73 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.5.1)

com.rabbitmq:amqp-client MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.corbel.lib:rabbitmq =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.31.1, =1.31.1,...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

GHSA-6G32-PXV4-2WFJ RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

The JSON-RPC tools in com.rabbitmq.tools.jsonrpc perform Class.forNamejavaReturnType with initialize=true on class names received from untrusted AMQP messages, without any validation or allowlist. Vulnerable code ProcedureDescription.java:101-127: When a JsonRpcClient connects, it calls...

net.kieker-monitoring:analysis (>=2.0.0, <=2.0.2), net.kieker-monitoring:monitoring-aspectj (>=2.0.0, <=2.0.2) +6 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.2.1)

com.rabbitmq:amqp-client MAVEN version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.kieker-monitoring:analysis =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.20.0, =2.20.0, =2.20.4 -...

com.automationrockstars:bmo-event-processor (>=2.0.1, <=2.0.3), com.automationrockstars:gir (>=2.0.1, <=2.0.3) +18 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.8.0)

com.rabbitmq:amqp-client MAVEN version 4.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =2.0.1, =2.0.1, =2.0.1, =2.0.1, =2.0.1, =1.0.0, =3.2.0-689,...

com.smoketurner.dropwizard:zipkin-core (>=1.3.8-1, <=1.3.9-1), io.dropwizard.metrics:metrics-graphite (4.1.0-rc3) +5 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.9.1)

com.rabbitmq:amqp-client MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.8-1, =2.0.0-rc0+test8, =2.11.9, =2.7.12, =2.7.12, =2.11.9, =2.12.0...

com.codacy:metrics-dropwizard_2.11 (>=1.0.33, <=3.1.2), com.codacy:metrics-dropwizard_2.12 (>=1.0.33, <=3.1.2) +428 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.4.1)

com.rabbitmq:amqp-client MAVEN version 4.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.codacy:metrics-dropwizard2.11 =1.0.33, =1.0.33, =3.1.0, =1.30.0, =1.29.0, =1.29.0, =1.2.0, =v0.0.5, =v0.0.5...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

com.github.marcelop3251:queues-manager (1.2.0), com.rabbitmq.jms:rabbitmq-jms (>=1.13.0, <=1.14.0) +9 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.11.3)

com.rabbitmq:amqp-client MAVEN version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.marcelop3251:queues-manager 1.2.0 - com.rabbitmq.jms:rabbitmq-jms =1.13.0, =1.3.15-1, =2.10.2,...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.5.3-2, <=1.5.4-8), com.devebot.opflow:opflow-core (>=0.1.4, <=0.1.21) +50 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.1.0)

com.rabbitmq:amqp-client MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.5.3-2, =0.1.4, =0.1.0, =0.5, =0.5, =0.1-m1, =0.1-m1, =5.3.0.12...

com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

net.leanix:leanix-dropkit (>=0.7.4, <=1.3.21), net.leanix:leanix-dropkit-persistence (>=1.0.0, <=1.1.6) +6 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.4.0)

com.rabbitmq:amqp-client MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.leanix:leanix-dropkit =0.7.4, =1.0.0, =1.6.4, =1.7.14 - net.liftmodules:amqp3.02.11 1.4.0 -...

com.bluelock:camel-spring-amqp (1.7.0), gr.iti.mklab:mklab-stream-manager (0.2.1) +15 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.4.2)

com.rabbitmq:amqp-client MAVEN version 3.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp 1.7.0 - gr.iti.mklab:mklab-stream-manager 0.2.1 -...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...