1617 matches found
PT-2026-77209
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.31.0, inbound AMQP command assembly in src/main/java/com/rabbitmq/client/impl/CommandAssembler.java processes a content-bearing method and header whose...
PT-2026-77211
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...
PT-2026-77210
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.client.ConnectionFactory.useSslProtocol and ConnectionFactory.useSslProtocolString configure com.rabbitmq.client.TrustEverythingTrustManager and...
PT-2026-77214
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively f...
PT-2026-77213
The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java uses ValueReader.readBytes to accept a wire-declared contentLength below Integer.MAX VALUE and allocate ...
ANT-2026-GTGXBRXN · rabbitmq-c · Integer Underflow
integer-underflow medium Severity Claude medium · Security research firm medium · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Trail of Bits. ANT-2026-GTGXBRXN: sizet underflow in AMQP frame length...
GO-2025-3749 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway-fips, paranoia, chart-testing-fips, falcosidekick-fips, liquibase-package-manager, skaffold, ytt-fips, temporal-server-fips, envoy-gateway, secrets-store-csi-driver-fips, aws-flb-cloudwatch, dcgm-exporter-fips, influxd, prometheus-operator,...
GO-2026-4601 vulnerabilities
Vulnerabilities for packages: prometheus-pushgateway-fips, chart-testing-fips, cluster-api-azure-controller-fips, knative-operator, liquibase-package-manager, opentelemetry-collector-contrib, ytt-fips, jobset-fips, temporal-server-fips, terraform-provider-grafana-fips, terragrunt,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: buildah, kubeflow, step-issuer, temporal-ui-server, timoni, runc, podinfo, gatus, k9s, kubernetes-csi-external-provisioner, nri-haproxy, src, jaeger-operator, victoriametrics-cluster, vault-k8s, crossplane-provider-aws-ec2, kube-vip, speedtest-go, nri-apache, act,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: cluster-api-gcp-controller, kubeflow, helm-set-status, kubernetes-csi-driver-nfs, temporal-ui-server, timoni, runc, podinfo, maru, azure-service-operator, gatus, sbomqs, kubernetes-csi-external-provisioner, git-sync, nri-haproxy, src, vault-k8s, juicefs, influx,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-driver-nfs, helm-set-status, azure-service-operator, src, kubernetes-dashboard-auth, nri-haproxy, k3d, nri-apache, delve, prometheus-operator, harbor-cli, wgcf, cluster-api-provider-vsphere, dive, render-template, terraform-mcp-server, conftest, kind,...
GO-2024-2947 vulnerabilities
Vulnerabilities for packages: flux-kustomize-controller, flux-helm-controller, flux-notification-controller, crossplane-provider-azure-managedidentity, kargo, ksops, sops, buildkitd, guac, slsa-verifier, kubevela, sigstore-scaffolding, k3d, flux-image-automation-controller, fulcio, k3s,...
oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification
A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS Transport Layer Security connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonat...
CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2
Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...
CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0
Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...
CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1
Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1
Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...
CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1
Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...
