Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the inbound frame size handling in AMQConnection.java. An attacker can trigger excessive frame allocation and crash the client by negotiating framemax=0 and then sending an...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.0-rc.2) +3376 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (>=5.0.0, <=5.33.1)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 - ai.platon.pulsar:browser4-seo 4.14.0-rc.2 and more Source cves: CVE-2026-75516 Source advisory:...

org.elasticsearch:elasticsearch-river-rabbitmq (>=0.16.0, <=0.16.5) potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.3.1)

com.rabbitmq:amqp-client MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.elasticsearch:elasticsearch-river-rabbitmq =0.16.0, =0.16.5 Source cves: CVE-2026-75516 Source advisory:...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

com.ahome-it:ahome-tooling-server-core (1.1.0-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.0-release) +153 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.7)

com.rabbitmq:amqp-client MAVEN version 3.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.ahome-it:ahome-tooling-server-core 1.1.0-release - com.ahome-it:ahome-tooling-server-hazelcast 1.1.0-releas...

com.automationrockstars:gunter-rabbit (>=1.0.2, <=2.0.3), com.rabbitmq.jms:rabbitmq-jms (1.4.7) +4 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.6.2)

com.rabbitmq:amqp-client MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:gunter-rabbit =1.0.2, =1.1.1, =3.3.0.cr1, =3.3.0.cr1, =2.1.0-alpha.1, =2.1.0-alpha.2...

br.jus.stf.digital:core (0.1.0), br.jus.stf.digital:test (>=1.0.0-rc, <=1.0.2) +98 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.6.3)

com.rabbitmq:amqp-client MAVEN version 3.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core 0.1.0 - br.jus.stf.digital:test =1.0.0-rc, =1.1.4-release, =1.1.4-release,...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

com.bq.corbel.lib:rabbitmq (>=0.9.0, <=0.10.0), com.bq.corbel.lib:ws (>=0.20.0, <=0.23.0) +73 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.1)

com.rabbitmq:amqp-client MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.corbel.lib:rabbitmq =0.9.0, =0.20.0, =1.31.1, =1.27.1, =1.31.0, =1.31.1, =1.31.1, =1.31.1, =1.31.1,...

com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

com.automationrockstars:bmo-event-processor (>=1.0.3, <=2.0.0), com.automationrockstars:gir (>=1.0.2, <=2.0.0) +16 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.5.4)

com.rabbitmq:amqp-client MAVEN version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =1.0.3, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =0.9.0, =2.16.0,...

com.devebot.opflow:opflow-core (>=0.1.22, <=0.1.23), com.github.gvolpe:fs2-rabbit-circe_2.11 (>=0.6, <=1.0-rc1) +17 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.6.0)

com.rabbitmq:amqp-client MAVEN version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.devebot.opflow:opflow-core =0.1.22, =0.6, =0.6, =0.6, =0.6, =1.3.2-1, =2.7.2, =2.7.2, =2.8.4 and more Sourc...

com.smoketurner.dropwizard:zipkin-core (>=1.3.5-2, <=1.3.5-5), io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.2, <=2.11.4) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.7.0)

com.rabbitmq:amqp-client MAVEN version 4.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.5-2, =2.11.2, =2.7.7, =2.7.7, =2.11.2, =2.11.4 Source cves:...

cn.springcloud.gray:spring-cloud-gray-plugin-event-stream (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-plugin-event-stream (>=a.1.1.1, <=a.2.0.0) +15 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.8.3)

com.rabbitmq:amqp-client MAVEN version 4.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.springcloud.gray:spring-cloud-gray-plugin-event-stream =a.1.1.1, =a.1.1.1, =1.11.0, =1.3.7-2, =1.19.1,...

com.smoketurner.dropwizard:zipkin-core (>=1.3.12-1, <=1.3.12-4), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.8.3, <=2.10.1) +2 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.11.1)

com.rabbitmq:amqp-client MAVEN version 4.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.smoketurner.dropwizard:zipkin-core =1.3.12-1, =2.8.3, =2.8.3, =2.10.1 -...

io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq (>=2.11.13, <=2.12.9), io.zipkin.reporter2:zipkin-reporter-spring-beans (>=2.7.15, <=2.8.2) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.10.0)

com.rabbitmq:amqp-client MAVEN version 4.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.java:zipkin-autoconfigure-collector-rabbitmq =2.11.13, =2.7.15, =2.7.15, =2.11.13, =2.12.9 -...

io.zipkin.zipkin2:zipkin-collector-rabbitmq (>=2.14.1, <=2.14.2), org.apache.zipkin.reporter2:zipkin-reporter-spring-beans (2.8.3) +2 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.11.0)

com.rabbitmq:amqp-client MAVEN version 4.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.zipkin.zipkin2:zipkin-collector-rabbitmq =2.14.1, =2.14.2 -...

com.github.marcelop3251:queues-manager (1.2.0), com.rabbitmq.jms:rabbitmq-jms (>=1.13.0, <=1.14.0) +9 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.11.3)

com.rabbitmq:amqp-client MAVEN version 4.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.marcelop3251:queues-manager 1.2.0 - com.rabbitmq.jms:rabbitmq-jms =1.13.0, =1.3.15-1, =2.10.2,...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

com.cisco.oss.foundation.queue:queue-rabbitmq (>=1.5.3-2, <=1.5.4-8), com.devebot.opflow:opflow-core (>=0.1.4, <=0.1.21) +50 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (4.1.0)

com.rabbitmq:amqp-client MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.cisco.oss.foundation.queue:queue-rabbitmq =1.5.3-2, =0.1.4, =0.1.0, =0.5, =0.5, =0.1-m1, =0.1-m1, =5.3.0.12...