ROOT-APP-MAVEN-CVE-2026-75516 CVE-2026-75516 in com.rabbitmq:amqp-client - Patched by Root

Root has patched CVE-2026-75516 in the com.rabbitmq:amqp-client package for Root:Maven. Multiple fixed versions available...

CLSA-2026-1791800237 TuxCare security update for com.rabbitmq:amqp-client (1 CVE)

TuxCare rebuilt com.rabbitmq:amqp-client to address 1 CVE. Fixed in 5.21.0-tuxcare.2...

Denial Of Service (DoS)

com.rabbitmq:amqp-client is vulnerable to Denial-of-service DoS. The vulnerability is due to the JSONReader.read method failing to terminate when parsing truncated strings or unterminated line comments, which allows an attacker to exhaust heap memory or consume excessive CPU resources through...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.ttpai.framework:ttpai-rose-spring-boot-autoconfigure-amqp (1.0.2) +173 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.0.3)

com.rabbitmq:amqp-client MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =1.0.0, =1.0.0, =9.00.2110.07.220316, =1.0.1, =1.0.0, =1.3.6.2,...

com.github.cloudbow:rmq-publisher (>=0.0.1, <=0.0.6), io.latent:storm-rabbitmq (1.0.0) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.5.0)

com.rabbitmq:amqp-client MAVEN version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cloudbow:rmq-publisher =0.0.1, =2.3.0, =2.3.0, =2.4.5 - ru.kiryam:storm-rabbitmq 0.6.2 Source cves:...

com.github.sstone:amqp-client_2.10 (1.5), com.github.sstone:amqp-client_2.11 (1.5) +1 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.5.2)

com.rabbitmq:amqp-client MAVEN version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.5 - com.github.sstone:amqp-client2.11 1.5 - com.harrys.hyppo:worker2.11...

net.leanix:leanix-dropkit (>=0.7.4, <=1.3.21), net.leanix:leanix-dropkit-persistence (>=1.0.0, <=1.1.6) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.4.0)

com.rabbitmq:amqp-client MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - net.leanix:leanix-dropkit =0.7.4, =1.0.0, =1.6.4, =1.7.14 - net.liftmodules:amqp3.02.11 1.4.0 -...

com.al333z:bunny_2.11 (>=0.0.3, <=0.0.4), com.al333z:bunny_2.12 (>=0.0.1, <=0.0.4) +75 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.0.0)

com.rabbitmq:amqp-client MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.al333z:bunny2.11 =0.0.3, =0.0.1, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.3.0, =1.3.2 -...

ai.hyacinth.framework:core-service-bus-support (>=0.5.0, <=0.5.24), ai.platon.pulsar:browser4-agent-tools (>=4.13.5, <=4.14.0-rc.2) +3400 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (>=5.0.0, <=5.36.0)

com.rabbitmq:amqp-client MAVEN version =5.0.0, =0.5.0, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.13.5, =4.14.0-rc.2 - ai.platon.pulsar:browser4-seo 4.14.0-rc.2 and more Source cves: CVE-2026-106121 Source advisory: OSV:GHSA-CQGH-8P3P-MX4...

com.github.sstone:amqp-client_2.10 (1.2), mx.bigdata.utils:amqp-utils (1.2.1) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.1.1)

com.rabbitmq:amqp-client MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.sstone:amqp-client2.10 1.2 - mx.bigdata.utils:amqp-utils 1.2.1 - org.atmosphere:atmosphere-rabbitmq...

com.sarehub:client (0.1.0), com.stratio.receiver:spark-rabbitmq (>=0.4.0, <=0.5.1) +40 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.6.6)

com.rabbitmq:amqp-client MAVEN version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.sarehub:client 0.1.0 - com.stratio.receiver:spark-rabbitmq =0.4.0, =0.5.1 -...

com.jasonclawson:rabbitmq-ha-client (>=0.5.0, <=0.5.2), com.m3958.vertxprj:applogvertx (0.0.1) +4 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.1.4)

com.rabbitmq:amqp-client MAVEN version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.jasonclawson:rabbitmq-ha-client =0.5.0, =0.3.0, =0.0.2, =0.0.4 Source cves: CVE-2026-106121 Source advisory...

br.jus.stf.digital:core (>=0.2.0, <=1.6.0), com.github.jcustenborder.kafka.connect:kafka-connect-rabbitmq (>=0.0.2.6, <=0.0.2.9) +13 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.0.1)

com.rabbitmq:amqp-client MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - br.jus.stf.digital:core =0.2.0, =0.0.2.6, =1.1.0, =0.0.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1, =3.2.1,...

com.github.cafdataprocessing:data-processing-queue-helper (>=1.1.0-20, <=1.3.0-70), com.github.cafdataprocessing:data-processing-task-receiver (>=1.1.0-20, <=1.3.0-70) +35 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.5.3)

com.rabbitmq:amqp-client MAVEN version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cafdataprocessing:data-processing-queue-helper =1.1.0-20, =1.1.0-20, =1.1.0-20, =1.0.0-212, =2.0.0-3...

com.github.cycladessoa.nyxlets:exec (>=1.0.0.1, <=1.0.0.14), com.github.cycladessoa.nyxlets:log (>=1.0.0.3, <=1.0.0.31) +8 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.8.6)

com.rabbitmq:amqp-client MAVEN version 2.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.github.cycladessoa.nyxlets:exec =1.0.0.1, =1.0.0.3, =1.0.0.1, =1.0.0.3, =1.0.0.2, =1.0.0.1, =1.0.0.3,...

com.abiquo:commons-amqp (>=3.1.0, <=3.2.0), com.github.sstone:amqp-client_2.10 (>=1.3, <=1.4) +11 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.3.1)

com.rabbitmq:amqp-client MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =3.1.0, =1.3, =1.0, =0.9.0, =1.0.0, =0.10.0, =0.7.0-incubating, =0.7.0-incubating,...

io.motown.domain:domain-utils (0.8.2), io.motown.ocpp:ocpp-soap-utils (0.8.2) +7 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.2.3)

com.rabbitmq:amqp-client MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - io.motown.domain:domain-utils 0.8.2 - io.motown.ocpp:ocpp-soap-utils 0.8.2 - io.motown.ocpp:ocpp-v12-soap 0.8.2...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2026-106121 Source...

com.rabbitmq:perf-test (>=1.4.0, <=1.4.2), com.sportradar.mts.sdk.app:mts-sdk-app (>=2.3.6.0-1, <=2.4.1.2) +6 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.2.2)

com.rabbitmq:amqp-client MAVEN version 4.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq:perf-test =1.4.0, =2.3.6.0-1, =2.3.6.0-1, =2.3.6.0-1, =0.1.5, =2.1.0, =2.1.0, =2.1.0, =2.1.4 Sourc...

com.rabbitmq.jms:rabbitmq-jms (>=1.15.0, <=1.15.2), com.smoketurner.dropwizard:zipkin-core (2.0.16-1) +101 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (4.12.0)

com.rabbitmq:amqp-client MAVEN version 4.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms =1.15.0, =2.4.2.0-17, =2.4.2.0-17, =2.4.2.0-17, =4.1.3, =4.1.3, =4.1.3, =4.1.3,...