com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

br.jus.stf.digital:core (>=2.0.0, <=2.3.1), cn.hyperchain.javasdk:hyperchainsdk (>=4.2.1, <=4.2.3) +123 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (4.0.2)

com.rabbitmq:amqp-client MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =2.0.0, =4.2.1, =1.1.0, =0.10, =0.10, =1.2.0, =1.2.0, =0.10, =0.10, =1.0.0-rc1,...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

com.automationrockstars:bmo-event-processor (>=1.0.3, <=2.0.0), com.automationrockstars:gir (>=1.0.2, <=2.0.0) +16 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.5.4)

com.rabbitmq:amqp-client MAVEN version 3.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.automationrockstars:bmo-event-processor =1.0.3, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =0.9.0, =2.16.0,...

com.coiney:akka-rabbit-core_2.10 (0.3.0), com.coiney:akka-rabbit-core_2.11 (0.3.0) +7 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.3.3)

com.rabbitmq:amqp-client MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.coiney:akka-rabbit-core2.10 0.3.0 - com.coiney:akka-rabbit-core2.11 0.3.0 - net.roboconf:roboconf-agent =0....

Memory Exhaustion

com.rabbitmq, amqp-client is vulnerable to a memory exhaustion. The vulnerability is due to the client disabling the configured limit when the negotiated frameMax value is zero, which allows an attacker controlling a malicious AMQP server or performing a man-in-the-middle attack to inject oversiz...

Denial-Of-Service

com.rabbitmq, amqp-client is vulnerable to a Denial-of-service. the vulnerability is due to inconsistent application of the negotiated framemax limit, which allows a malicious or compromised RabbitMQ broker to send oversized method frames that the client attempts to allocate and decode instead of...

com.fluxcorp.plugins:rabbitmq-action (>=1.0.2, <=1.0.3), com.fluxcorp.plugins:rabbitmq-trigger (>=1.0.2, <=1.0.3) potentially affected by CVE-2026-63336 via com.rabbitmq:amqp-client (2.4.1)

com.rabbitmq:amqp-client MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.fluxcorp.plugins:rabbitmq-action =1.0.2, =1.0.2, =1.0.3 Source cves: CVE-2026-63336 Source advisory:...

com.rabbitmq.jms:rabbitmq-jms (1.12.0) potentially affected by CVE-2026-63337 via com.rabbitmq:amqp-client (4.11.2)

com.rabbitmq:amqp-client MAVEN version 4.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.12.0 Source cves: CVE-2026-63337 Source advisory: OSV:GHSA-6G32-PXV4-2WFJ...

com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

com.bq.oss.corbel:evci (1.20.0), com.bq.oss.corbel:event-bus (>=1.19.2, <=1.20.0) +16 more potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (3.4.1)

com.rabbitmq:amqp-client MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bq.oss.corbel:evci 1.20.0 - com.bq.oss.corbel:event-bus =1.19.2, =1.19.2, =1.19.2, =1.19.2, =0.1.1, =0.1.0,...

me.breidenbach:rabbitex (1.2) potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (3.2.0)

com.rabbitmq:amqp-client MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - me.breidenbach:rabbitex 1.2 Source cves: CVE-2023-46120 Source advisory: OSV:GHSA-MM8H-8587-P46H...