GO-2025-3749 vulnerabilities

Vulnerabilities for packages: chart-testing, k8ssandra-client-fips, calico, scorecard, yunikorn-web, dapr, cfssl-fips, hivemind, knative-client, pgpool2exporter, newrelic-k8s-metadata-injection, consul, elvish, k8s-device-plugin, nri-cassandra, rancher-helm, yq, step-kms-plugin-fips,...

GO-2026-4601 vulnerabilities

Vulnerabilities for packages: vault, nri-kafka-fips, syft, crane-fips, rke2-runtime, crossplane-provider-kubernetes-fips, kyverno-policy-reporter-plugins-trivy-fips, k8ssandra-client-fips, packer, crossplane-provider-aws-ec2, calico, gatekeeper, kepler, yunikorn-web, dapr, cfssl-fips,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: authservice, podinfo, nri-kubernetes, crossplane-provider-aws-firehose, osv-scanner, hubble, bank-vaults, crossplane-provider-aws-kms, cluster-autoscaler, docker-credential-acr-env, flannel, go, policy-controller, spark-operator, polaris, kubeflow, steampipe,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: authservice, podinfo, crossplane-provider-aws-firehose, osv-scanner, hubble, bank-vaults, policy-controller, go-licenses, flannel, spark-operator, terraform-provider-time, kubeflow, steampipe, croc, clickhouse-operator, slsa-verifier, grafana-operator,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus-operator, nats-server-config-reloader, hubble, spark-operator, fulcio, cni-plugins, polaris, steampipe, envconsul, clickhouse-operator, fzf, wal-g, helm-push, cis-operator, kubernetes-dashboard-web, kapp, kubernetes-csi-driver-hostpath, dive, mockgen,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terragrunt, sops, vexctl, gitsign, flux-image-automation-controller, buildkitd, gh, aactl, kargo, bank-vaults, policy-controller, fulcio, crossplane-provider-azure, crossplane-provider-azure-managedidentity, flux-image-reflector-controller, kubevela, rook, cosign,...

oslo.messaging: openstack: OpenStack oslo.messaging: Man-in-the-middle attack via improper TLS hostname verification

A flaw was found in OpenStack oslo.messaging. The RabbitMQ driver does not properly verify the hostname of the message broker when establishing a TLS Transport Layer Security connection. An attacker capable of intercepting control-plane network traffic can exploit this vulnerability to impersonat...

CLEANSTART-2026-OO22400 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r1

Package rabbitmq-messaging-topology-operator version 1.16.0-r1 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-BB29139 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r2

Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CLEANSTART-2026-TQ91527 Security fixes in rabbitmq-cluster-operator 2.22.2-r1

Package rabbitmq-cluster-operator version 2.22.2-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CLEANSTART-2026-IT62249 Security fixes in rabbitmq-messaging-topology-operator 1.16.0-r0

Package rabbitmq-messaging-topology-operator version 1.16.0-r0 fixes 55 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...

CLEANSTART-2026-RR36029 Security fixes in rabbitmq-cluster-operator 2.22.3-r1

Package rabbitmq-cluster-operator version 2.22.3-r1 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

PT-2026-85825

Package rabbitmq-messaging-topology-operator version 1.16.0-r2 fixes 1 vulnerabilities: ghsa-259r-337f-4rfw...

CVE-2026-43966 affecting package rabbitmq-server for versions less than 3.13.7-8

CVE-2026-43966 affecting package rabbitmq-server for versions less than 3.13.7-8. A patched version of the package is available...

CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8

CVE-2026-44839 affecting package rabbitmq-server for versions less than 3.13.7-8. A patched version of the package is available...

This Week in Spring - August 11th, 2026

Hi, Spring fans! Welcome back to another lively edition of This Week in Spring! So much is always happening in the Spring world, and that’s part of what makes it so fun to follow. One of my favorite things is how much the community contributes and how great it is to connect with everyone. In earl...

[SECURITY] Fedora 43 Update: rabbitmq-server-4.0.9-5.fc43

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...

Fedora 43 : rabbitmq-server (2026-548235ea3b)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-548235ea3b advisory. More CVEs ---- Fixed CVE-2026-44839 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...

A Bootiful Podcast: Data guru Gregory Green on RabbitMQ, Valkey, Gemfire, Data Flow, and more

Hi, Spring and data fans! Want a faster, smarter data stack? Tune into this episode with Gregory Green for a deep dive into GemFire, RabbitMQ Streams, Dataflow, and more. We cover real-time event processing, active-active consistency, full-text search, vector search, and how to build resilient,...

Photon OS 5.0: Rabbitmq PHSA-2025-5.0-91-0646

An update of the rabbitmq package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0646. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...