CVE-2026-77406

RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. Prior to 1.13.0, Channel.Qos in channel.go accepts negative prefetchCount and prefetchSize integers and casts them directly to uint16 and uint32 fields in the basic.qos method because validateQos is absent. Values such as -1 therefore wrap to 65535 o...

PT-2026-93796

Name of the Vulnerable Software and Affected Versions RabbitMQ amqp091-go versions prior to 1.13.0 Description A resource exhaustion issue exists in the Quality of Service configuration. The Qos function in channel.go accepts signed integers for the prefetchCount and prefetchSize parameters but...