Deserialization Of Untrusted Data

RabbitMQ Java client library is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to the javaReturnType value from an untrusted system.describe response being passed to Class.forName with class initialization enabled, which allows an attacker capable of intercepting or...

UBUNTU-CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-61634

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based application...

UBUNTU-CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based application...

CVE-2026-63335

creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:15+00:00| published-proof-of-concept| https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr...

CVE-2026-63336

creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:13+00:00| published-proof-of-concept| https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-5m9f-rphj-c435...

DEBIAN-CVE-2026-69220

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...

CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...

DEBIAN-CVE-2026-69219

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAXVALUE and allocate a...

DEBIAN-CVE-2026-63335

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...

DEBIAN-CVE-2026-63336

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...