org.elasticsearch:elasticsearch-river-rabbitmq (>=0.11.0, <=0.13.1), org.iplantc.core:metadactyl (1.8.4) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.1.0)

com.rabbitmq:amqp-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.11.0, =0.13.1 - org.iplantc.core:metadactyl 1.8.4 Source cves...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.16.0, <=0.16.5) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.3.1)

com.rabbitmq:amqp-client MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.16.0, =0.16.5 Source cves: CVE-2026-63337 Source advisory:...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2026-63337 Source advisor...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.17.0, <=1.0.0) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.5.1)

com.rabbitmq:amqp-client MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.17.0, =1.0.0 Source cves: CVE-2026-63337 Source advisory:...

com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14), com.github.cycladessoa.nyxlets:log (>=1.0.0.3, <=1.0.0.31) +8 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.8.6)

com.rabbitmq:amqp-client MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cycladessoa.nyxlets:exec =1.0.0.1, =1.0.0.3, =1.0.0.1, =1.0.0.3, =1.0.0.2, =1.0.0.1, =1.0.0.3,...

com.nesscomputing.components:ness-amqp (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (2.8.5)

com.rabbitmq:amqp-client MAVEN version 2.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.nesscomputing.components:ness-amqp =1.0.0, =1.1.0 Source cves: CVE-2026-63337 Source advisory:...

eu.socialsensor:socialsensor-framework-client (0.1) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.0.0)

com.rabbitmq:amqp-client MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - eu.socialsensor:socialsensor-framework-client 0.1 Source cves: CVE-2026-63337 Source advisory:...

com.github.pukkaone:logback-gelf (>=1.1.5, <=1.1.9), com.globo.graylog2:gelfj (>=1.1.16.0, <=1.1.16.1) +13 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.0.4)

com.rabbitmq:amqp-client MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.pukkaone:logback-gelf =1.1.5, =1.1.16.0, =2.0.0, =1.1.3, =1.2, =1.2, =1.5 Source cves: CVE-2026-6333...

org.apache.airavata:airavata-api-server (>=0.12, <=0.14), org.apache.airavata:airavata-client-api (>=0.9, <=0.14) +30 more potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (3.1.2)

com.rabbitmq:amqp-client MAVEN version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.apache.airavata:airavata-api-server =0.12, =0.9, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12, =0.12,...

RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

Summary ValueReader.readBytes allocates a byte array sized by a wire-declared content length without validating it against actual frame data. A malicious AMQP peer triggers OOM by declaring a 2GB string/bytes field. Vulnerable Code src/main/java/com/rabbitmq/client/impl/ValueReader.java lines...

eu.socialsensor:socialsensor-framework-client (0.1) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.0.0)

com.rabbitmq:amqp-client MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - eu.socialsensor:socialsensor-framework-client 0.1 Source cves: CVE-2026-69219 Source advisory:...

org.jenkins-ci.plugins:rabbitmq-build-trigger (>=1.0, <=1.1), org.jenkins-ci.plugins:rabbitmq-consumer (>=1.0, <=1.1) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.0.3)

com.rabbitmq:amqp-client MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.jenkins-ci.plugins:rabbitmq-build-trigger =1.0, =1.0, =1.1 Source cves: CVE-2026-69219 Source advisory:...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.11.0, <=0.13.1), org.iplantc.core:metadactyl (1.8.4) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.1.0)

com.rabbitmq:amqp-client MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.11.0, =0.13.1 - org.iplantc.core:metadactyl 1.8.4 Source cves...

flux:rabbitmq-action (>=1.0.0, <=1.0.1), flux:rabbitmq-trigger (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.2.0)

com.rabbitmq:amqp-client MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - flux:rabbitmq-action =1.0.0, =1.0.0, =1.0.3, =0.14.0, =5.5.0, =5.5.0, =5.5.0, =5.5.0, =5.7.1, =5.7.1, =5.7.1,...

com.fluxcorp.plugins:rabbitmq-action (>=1.0.2, <=1.0.3), com.fluxcorp.plugins:rabbitmq-trigger (>=1.0.2, <=1.0.3) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.4.1)

com.rabbitmq:amqp-client MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.fluxcorp.plugins:rabbitmq-action =1.0.2, =1.0.2, =1.0.3 Source cves: CVE-2026-69219 Source advisory:...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2026-69219 Source advisor...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.17.0, <=1.0.0) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.5.1)

com.rabbitmq:amqp-client MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.17.0, =1.0.0 Source cves: CVE-2026-69219 Source advisory:...

cn.net.vidyo:jsmth-data (3.3.120.release), cn.net.vidyo:jsmth-msg (3.3.120.release) +6 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.8.2)

com.rabbitmq:amqp-client MAVEN version 2.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.net.vidyo:jsmth-data 3.3.120.release - cn.net.vidyo:jsmth-msg 3.3.120.release - cn.net.vidyo:jsmth-orm...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

com.threerings:ooo-messaging (1.1), net.liftmodules:amqp_2.10 (>=2.5-m4-1.2, <=2.5-rc4-1.2) +15 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (1.7.2)

com.rabbitmq:amqp-client MAVEN version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.threerings:ooo-messaging 1.1 - net.liftmodules:amqp2.10 =2.5-m4-1.2, =2.5-m1-1.1, =2.5-m1-1.1, =2.5-m1-1.1,...