This Week in Spring - August 4th, 2026

Hi, Spring fans! Welcome to another installment of This Week in Spring! It's the 4th of August! We're already in month eight of this year! Great Scott! This is an interesting project to help ensure idempotency keys for Spring Boot requests A very interesting post on The New Stack titled, When...

CVE-2026-18655

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...

CVE-2026-18655

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...

EUVD-2026-52406

Improper restriction of intended endpoints in the RabbitMQ broker connection tools of the Amazon MQ MCP Server awslabs.amazon-mq-mcp-server before 2.0.24 may allow a remote unauthenticated actor via prompt injection to obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens sent t...

MGASA-2026-0314 Updated librabbitmq packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a proce...

Updated librabbitmq packages fix security vulnerabilities

The updated packages fix security vulnerabilities: An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for amqp-publish or amqp-consume and are thus visible to local attackers by listing a proce...

PT-2026-67485

Name of the Vulnerable Software and Affected Versions Amazon MQ MCP Server awslabs.amazon-mq-mcp-server versions prior to 2.0.24 Description Improper restriction of intended endpoints in the RabbitMQ broker connection tools may allow a remote unauthenticated actor to obtain Amazon MQ for RabbitMQ...

[SECURITY] Fedora 44 Update: rabbitmq-server-4.2.9-2.fc44

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker...

Fedora 44 : rabbitmq-server (2026-6326bdeab0)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-6326bdeab0 advisory. Fix users creation ---- RabbitMQ ver. 4.2.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

CLEANSTART-2026-PK42810 Security fixes in rabbitmq-messaging-topology-operator 1.18.3-r2

Package rabbitmq-messaging-topology-operator version 1.18.3-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-SA98192 Security fixes in rabbitmq-messaging-topology-operator 1.19.2-r0

Package rabbitmq-messaging-topology-operator version 1.19.2-r0 fixes 9 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507, CVE-2026-25681, CVE-2026-27136...

CLEANSTART-2026-KV79736 Security fixes in rabbitmq-cluster-operator 2.19.2-r5

Package rabbitmq-cluster-operator version 2.19.2-r5 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-KH47666 Security fixes in rabbitmq-cluster-operator 2.20.1-r2

Package rabbitmq-cluster-operator version 2.20.1-r2 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-JH58226 Security fixes in rabbitmq-cluster-operator 2.21.0-r0

Package rabbitmq-cluster-operator version 2.21.0-r0 fixes 1 vulnerabilities: CVE-2026-42504...

CLEANSTART-2026-GI68088 Security fixes in rabbitmq-messaging-topology-operator 1.19.0-r0

Package rabbitmq-messaging-topology-operator version 1.19.0-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-CC85180 Security fixes in rabbitmq-cluster-operator 2.20.0-r1

Package rabbitmq-cluster-operator version 2.20.0-r1 fixes 13 vulnerabilities: CVE-2026-27143, ghsa-pc3f-x583-g7j2, CVE-2026-32281, CVE-2026-32280, CVE-2026-32283...

CLEANSTART-2026-XE28379 Security fixes in rabbitmq-messaging-topology-operator 1.19.3-r0

Package rabbitmq-messaging-topology-operator version 1.19.3-r0 fixes 4 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.2: rabbitmq-server4.2-4.2.9-0.2.hum1 aarch64, x8664 rabbitmq-server4.2-4.2.9-0.2.hum1.src src Security Fixes: rabbitmq-server4.2: CVE-2026-59248 CVE-2026-65624...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: rabbitmq-server4.3: rabbitmq-server4.3-4.3.4-0.2.hum1 aarch64, x8664 rabbitmq-server4.3-4.3.4-0.2.hum1.src src Security Fixes: rabbitmq-server4.3: CVE-2026-59248 CVE-2026-65624...

CVE-2026-57220

A flaw was found in RabbitMQ. The stream listener in RabbitMQ does not properly enforce frame-size limits during authentication and before negotiation. This allows an unauthenticated remote client to send oversized stream frames, which can consume excessive broker memory. This can lead to a denia...