org.elasticsearch:elasticsearch-river-rabbitmq (1.1.0) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.7.0)

com.rabbitmq:amqp-client MAVEN version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq 1.1.0 Source cves: CVE-2026-69219 Source advisory:...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2026-69219 Source...

com.github.sstone:akka-amqp-proxies_2.10 (>=1.1-rc1, <=1.3), com.github.sstone:akka-amqp-proxies_2.10.1 (1.2) +1 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.0.1)

com.rabbitmq:amqp-client MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 =1.1-rc1, =1.1-rc1, =1.1 Source cves: CVE-2026-69219 Source advisory:...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14), com.github.cycladessoa.nyxlets:log (>=1.0.0.3, <=1.0.0.31) +8 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (2.8.6)

com.rabbitmq:amqp-client MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cycladessoa.nyxlets:exec =1.0.0.1, =1.0.0.3, =1.0.0.1, =1.0.0.3, =1.0.0.2, =1.0.0.1, =1.0.0.3,...

com.github.sstone:amqp-client_2.10 (1.2), mx.bigdata.utils:amqp-utils (1.2.1) +3 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.1.1)

com.rabbitmq:amqp-client MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.2 - mx.bigdata.utils:amqp-utils 1.2.1 - org.atmosphere:atmosphere-rabbitmq...

io.motown.domain:domain-utils (0.8.2), io.motown.ocpp:ocpp-soap-utils (0.8.2) +7 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.2.3)

com.rabbitmq:amqp-client MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.motown.domain:domain-utils 0.8.2 - io.motown.ocpp:ocpp-soap-utils 0.8.2 - io.motown.ocpp:ocpp-v12-soap 0.8.2...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...

me.breidenbach:rabbitex (1.2) potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.2.0)

com.rabbitmq:amqp-client MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - me.breidenbach:rabbitex 1.2 Source cves: CVE-2026-69219 Source advisory: OSV:GHSA-68MJ-5WR7-6FGG...

com.github.sstone:akka-amqp-proxies_2.10 (1.4-ml1), com.github.sstone:amqp-client_2.10 (>=1.3-ml1, <=1.4-ml4) +4 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.2.1)

com.rabbitmq:amqp-client MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:akka-amqp-proxies2.10 1.4-ml1 - com.github.sstone:amqp-client2.10 =1.3-ml1, =0.9.0, =0.7.0,...

com.abiquo:commons-amqp (>=3.1.0, <=3.2.0), com.github.sstone:amqp-client_2.10 (>=1.3, <=1.4) +11 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (3.3.1)

com.rabbitmq:amqp-client MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =3.1.0, =1.3, =1.0, =0.9.0, =1.0.0, =0.10.0, =0.7.0-incubating, =0.7.0-incubating,...

EUVD-2026-61046

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.3) +4277 more potentially affected by CVE-2026-61634 via com.rabbitmq:amqp-client (>=1.7.2, <=5.32.0)

com.rabbitmq:amqp-client MAVEN version =1.7.2, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.3 and more Source cves: CVE-2026-61634 Source advisory: MEND:CVE-2026-61634...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-61634 RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-61634

In RabbitMQ Java client prior to 5.33.0, SocketFrameHandler.java and NettyFrameHandlerFactory validate frame payload lengths against maxInboundMessageBodySize instead of the negotiated frame_max, so a malicious broker can send oversized method frames that bypass MalformedFrameException checks, ca...

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP framemax value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and...