@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105859 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105859 Source advisory: GHSA-F7HX-52Q9-HCRF...

@01.software/cli (>=0.1.1, <=0.2.0), @01.software/sdk (>=0.0.1-251008.90016, <=0.3.0) +27 more potentially affected by CVE-2026-105859 via payload (>=3.33.0, <=3.89.0)

payload NPM version =3.33.0, =0.1.1, =0.0.1-251008.90016, =0.0.6, =0.0.31, =1.0.1-beta.0, =0.21.0, =0.14.0, =0.21.0, =0.21.0, =1.0.0, =3.64.0, =3.89.0 and more Source cves: CVE-2026-105859 Source advisory: SNYK:JS-PAYLOAD-20571316...

@payloadcms/plugin-redirects (>=4.0.0-canary.0, <=4.0.0-canary.33), @payloadcms/sdk (>=4.0.0-canary.0, <=4.0.0-canary.33) potentially affected by CVE-2026-105863 via payload (>=4.0.0-canary.0, <=4.0.0-canary.33)

payload NPM version =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.0, =4.0.0-canary.33 Source cves: CVE-2026-105863 Source advisory: GHSA-66WR-7VMR-P5JQ...

sign-alex (1.0.1) potentially affected by CVE-2026-104417 +1 more via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-104417, CVE-2026-105676 Source advisory: SNYK:JS-GHOST-21693965...

sign-alex (1.0.1) potentially affected by CVE-2026-104417 +1 more via ghost (1.26.2)

ghost NPM version 1.26.2 is affected by a known vulnerability. The following packages have a transitive dependency on ghost and may be impacted: - sign-alex 1.0.1 Source cves: CVE-2026-104417, CVE-2026-105676 Source advisory: OSV:GHSA-M382-6JW4-FMP6...

ghost-as-middleware (1.0.0), ghost-blade (0.1.0) +3 more potentially affected by CVE-2026-104412 +1 more via ghost (>=0.5.10, <=1.26.2)

ghost NPM version =0.5.10, =0.1.7, =0.1.10 - persistent-ghost 0.8.2 - sign-alex 1.0.1 Source cves: CVE-2026-104412, CVE-2026-105678 Source advisory: OSV:GHSA-4PVX-FWJJ-8GPC...

EUVD-2026-93775

RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers...

net.lshift:accent (>=0.1, <=0.9.1) potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (2.6.1)

com.rabbitmq:amqp-client MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.lshift:accent =0.1, =0.9.1 Source cves: CVE-2026-106122 Source advisory: OSV:GHSA-7822-RCF6-97FX...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.github.sstone:amqp-client_2.10 (1.2), mx.bigdata.utils:amqp-utils (1.2.1) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.1.1)

com.rabbitmq:amqp-client MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.2 - mx.bigdata.utils:amqp-utils 1.2.1 - org.atmosphere:atmosphere-rabbitmq...

com.bluelock:camel-spring-amqp (>=1.6.2, <=1.6.3), com.nummulus.amqp.driver:amqp-driver-blackbox_2.10 (0.1.0) +13 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.1.3)

com.rabbitmq:amqp-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.6.2, =1.0.0-rc1, =1.0.0-rc1, =1.0.0-rc1, =2.12.0, =1.6, =1.6, =1.0.1,...

com.jasonclawson:rabbitmq-ha-client (>=0.5.0, <=0.5.2), com.m3958.vertxprj:applogvertx (0.0.1) +4 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.1.4)

com.rabbitmq:amqp-client MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.jasonclawson:rabbitmq-ha-client =0.5.0, =0.3.0, =0.0.2, =0.0.4 Source cves: CVE-2026-106122 Source advisory...

me.breidenbach:rabbitex (1.2) potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.2.0)

com.rabbitmq:amqp-client MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - me.breidenbach:rabbitex 1.2 Source cves: CVE-2026-106122 Source advisory: OSV:GHSA-7822-RCF6-97FX...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +98 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.6.3)

com.rabbitmq:amqp-client MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core 0.1.0 - br.jus.stf.digital:test =1.0.0-rc, =1.1.4-release, =1.1.4-release,...

com.al333z:bunny_2.11 (>=0.0.3, <=0.0.4), com.al333z:bunny_2.12 (>=0.0.1, <=0.0.4) +75 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.0.0)

com.rabbitmq:amqp-client MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.al333z:bunny2.11 =0.0.3, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.3.0, =1.3.2 -...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +173 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.0.3)

com.rabbitmq:amqp-client MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =1.0.0, =1.0.0, =9.00.2110.07.220316, =1.0.1, =1.0.0, =1.3.6.2,...

com.github.gitssie:play-rabbitmq_2.12 (2.6.6), com.hellosoda.rmq:rmq-core_2.11 (>=1.0.7, <=1.0.9) +9 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.1.1)

com.rabbitmq:amqp-client MAVEN version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.gitssie:play-rabbitmq2.12 2.6.6 - com.hellosoda.rmq:rmq-core2.11 =1.0.7, =1.0.7, =1.0-alpha5, =0.0.7...

com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

com.ahome-it:ahome-tooling-server-core (>=1.1.1-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.1-release, <=1.1.3-release) +20 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.6.0)

com.rabbitmq:amqp-client MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core =1.1.1-release, =1.1.1-release, =1.1.1-release, =1.1.1-release,...