CVE-2026-75516

A flaw was found in the RabbitMQ Java client. A malicious AMQP Advanced Message Queuing Protocol server, or a man-in-the-middle attacker, can modify connection parameters and inject oversized frames. This can cause the client to allocate a large amount of memory, leading to memory exhaustion and...

CVE-2026-69219

A flaw was found in the RabbitMQ Java client library. A malicious AMQP Advanced Message Queuing Protocol peer can exploit this by sending a specially crafted message during the pre-authentication phase. This message can cause the client to allocate an excessively large amount of memory, leading t...

CVE-2026-63337

A flaw was found in the RabbitMQ Java client library. A remote attacker, by intercepting or answering a JsonRpcClient request, could provide a malicious javaReturnType value. This unvalidated input is then used in Class.forName, allowing the attacker to load an arbitrary class already present in...

CVE-2026-61634

A flaw was found in the RabbitMQ Java client library. A malicious or compromised broker can send a method frame larger than the negotiated Advanced Message Queuing Protocol AMQP framemax value. This inconsistent validation causes the client to allocate and decode a protocol-invalid frame, leading...

RabbitMQ Java Client DoS

The vulnerability of the AMQConnection.java file in the RabbitMQ rabbitmq-java-client Java client lies in its reliance on unlimited resource distribution. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SUSE CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

net.oneandone.cosmo:cosmo-core (>=1.0.10-rc, <=1.0.29), us.fatehi:schemacrawler-mariadb (14.07.06) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - net.oneandone.cosmo:cosmo-core =1.0.10-rc, =1.0.29 - us.fatehi:schemacrawler-mariadb...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +182 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

com.boxfuse.client:com.boxfuse.client.gradle.plugin (>=1.19.5.972, <=1.36.2.2021), com.ins.gradle.plugin.boxfuse:com.ins.gradle.plugin.boxfuse.gradle.plugin (1.0.1) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.4.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.boxfuse.client:com.boxfuse.client.gradle.plugin =1.19.5.972, =1.19.5.972, =1.1.0,...

com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...

com.moomanow.web:moomanowwebapp (>=0.0.2, <=0.0.10), org.apereo.cas:cas-server-support-jdbc (>=5.1.0-rc1, <=5.1.0-rc2) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.moomanow.web:moomanowwebapp =0.0.2, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1, =5.1.0-rc1,...

io.zipkin.java:zipkin-autoconfigure-storage-mysql (>=0.21.0, <=1.0.0), us.fatehi:schemacrawler-mariadb (>=14.08.01, <=14.08.02) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.4.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-storage-mysql =0.21.0, =14.08.01, =14.08.02 Source...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.8.0), com.tmsps:ne4spring (>=1.6.6, <=999.0.0.0) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.5.0, =1.6.6, =999.0.0.0 Source cves: CVE-2026-617...

com.stratio.crossdata.connector:crossdata-cassandra (>=1.0.0, <=1.2.2), com.stratio.crossdata.connector:crossdata-cassandra_2.10 (>=1.3.0, <=1.5.0) +43 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.2.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.stratio.crossdata.connector:crossdata-cassandra =1.0.0, =1.3.0, =1.3.0, =1.0.0,...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

io.zipkin.dependencies:zipkin-dependencies (1.6.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.6.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.6.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.6.1 -...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +399 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-61700 Source advisory: GHSA-WXMM-Q36W-R9XJ...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-61700 Source advisory: OSV:GHSA-WXMM-Q36W-R9XJ...

com.tmsps:ne4spring (>=1.0, <=1.5.2), org.cloudfoundry.identity:cloudfoundry-identity-api (>=2.3.1, <=3.20.0) +12 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.1.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.tmsps:ne4spring =1.0, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =2.3.1, =3.0.0, =2.3.1, =0.2,...

io.zipkin.dependencies:zipkin-dependencies (1.11.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.11.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.11.1 -...