MAL-2026-749 Malicious code in @purecore/rabbitmq (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0e503973dbf2c860017e4ea8118ddec5cd43a537c32eb8fca24ac544a86d8822 The package @purecore/rabbitmq was found to contain malicious code. Source: ghsa-malware...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, ghaudit, kubescape-operator, neuvector-sigstore-interface, kubernetes-event-exporter, spark-operator, prometheus, nri-couchbase, nats-server-config-reloader, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, harbor-registr...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: step-kms-plugin, gatekeeper, kube-arangodb, rancher-system-upgrade-controller, ghaudit, kubescape-operator, vale, aws-sigv4-proxy, yace, go-licenses, timoni, kuma, rancher-loglevel, chart-testing, neuvector-sigstore-interface, gitlab-runner, kubernetes-event-exporter...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, gatekeeper, kube-arangodb, rancher-system-upgrade-controller, ghaudit, kubescape-operator, vale, aws-sigv4-proxy, yace, go-licenses, timoni, kuma, rancher-loglevel, chart-testing, neuvector-sigstore-interface, gitlab-runner, kubernetes-event-exporter...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, ghaudit, kubescape-operator, neuvector-sigstore-interface, kubernetes-event-exporter, spark-operator, prometheus, nri-couchbase, nats-server-config-reloader, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, harbor-registr...

GHSA-GM9R-Q53W-2GH4 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, gatekeeper, kube-arangodb, rancher-system-upgrade-controller, ghaudit, kubescape-operator, vale, aws-sigv4-proxy, yace, go-licenses, timoni, kuma, rancher-loglevel, chart-testing, neuvector-sigstore-interface, gitlab-runner, kubernetes-event-exporter...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: rancher-system-upgrade-controller, ghaudit, kubescape-operator, neuvector-sigstore-interface, kubernetes-event-exporter, spark-operator, prometheus, nri-couchbase, nats-server-config-reloader, aws-eks-pod-identity-agent, kubernetes-csi-driver-hostpath, harbor-registr...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, minio-fips, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips, grpc-health-probe-fips,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, minio-fips, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips, grpc-health-probe-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, xcaddy, minio-fips, cargobump, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, xcaddy, minio-fips, cargobump, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, minio-fips, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips, grpc-health-probe-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, xcaddy, minio-fips, cargobump, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: doppler-kubernetes-operator, xcaddy, minio-fips, cargobump, kapp, k3d, kuma, x509-certificate-exporter, chisel, kubernetes-csi-external-resizer, crossplane-provider-aws-iam, generic-device-plugin-fips, kubeflow, external-dns-fips, flux-source-controller-fips,...

CLEANSTART-2026-GN47077 Within HostnameError

Multiple security vulnerabilities affect the rabbitmq-messaging-topology-operator package. Within HostnameError. See references for individual vulnerability details...

SUSE: Security Advisory (SUSE-SU-2026:20126-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 16 Security Update : rabbitmq-server (openSUSE-SU-2026:20082-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20082-1 advisory. Changes in rabbitmq-server: Update to 4.1.5: Highlights - Khepri, an alternative schema data store developed to replace Mnesia, has matured and is now...

Security update for rabbitmq-server (moderate)

openSUSE security update: security update for rabbitmq-server ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20082-1 Rating: moderate References: bsc1246091 Cross-References: CVE-2025-30219 CVSS scores: CVE-2025-30219 SUSE : 6.1...

Azure Linux 3.0 Security Update: librabbitmq (CVE-2023-35789)

The version of librabbitmq installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-35789 advisory. - An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ...

CVE-2021-22117

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins...