com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2026-106121 Sourc...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-106121 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.abiquo:commons-amqp (>=2.0.0, <=3.0.0), com.bluelock:camel-spring-amqp (>=1.0, <=1.2) +2 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (2.5.0)

com.rabbitmq:amqp-client MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.abiquo:commons-amqp =2.0.0, =1.0, =2.1.0.release, =2.1.6.release Source cves: CVE-2026-106122 Source...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2026-106122 Sourc...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +11 more potentially affected by CVE-2026-106122 via com.rabbitmq:amqp-client (3.3.4)

com.rabbitmq:amqp-client MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =0.10.0, =3.0.0, =2.14.0, =2.2.0, =5.0.3,...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

com.bluelock:camel-spring-amqp (>=1.5, <=1.6.1), com.nesscomputing.service.activemq:activemq-server (>=5.8.0-ness-1, <=5.8.0-ness-2) +5 more potentially affected by CVE-2026-106123 via com.rabbitmq:amqp-client (2.8.4)

com.rabbitmq:amqp-client MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.5, =5.8.0-ness-1, =1.1.2.release, =2.2.0.release, =2.2.7.release Source cves:...

com.bluelock:camel-spring-amqp (>=1.3, <=1.4), com.fluxcorp.plugins:rabbitmq-action (1.0.4) +3 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (2.8.1)

com.rabbitmq:amqp-client MAVEN version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.bluelock:camel-spring-amqp =1.3, =2.0-m1, =1.1.0.release, =1.1.1.release Source cves: CVE-2026-75516 Source...

org.graylog2:graylog2-inputs (>=0.21.0-beta2, <=0.92.0-beta.1), org.graylog2:graylog2-shared (>=0.21.0-beta2, <=0.92.0-beta.1) +2 more potentially affected by CVE-2026-75516 via com.rabbitmq:amqp-client (3.2.4)

com.rabbitmq:amqp-client MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - org.graylog2:graylog2-inputs =0.21.0-beta2, =0.21.0-beta2, =1.3.0.release, =1.3.2.release -...

Man-In-The-Middle (MitM)

org.springframework.amqp, spring-rabbit is vulnerable to a man-in-the-middle MitM. The vulnerability is due to the Log4j2 appender relying on an insecure documented default TLS configuration, which allows an attacker capable of intercepting the TLS connection to perform a man-in-the-middle attack...

cn.hdfk7.boot:hdfk7-boot-starter-common (4.0.0), com.avides.spring:spring-rabbit (5.0.0-rc1) +102 more potentially affected by CVE-2026-59272 via org.springframework.amqp:spring-rabbit (4.1.0)

org.springframework.amqp:spring-rabbit MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-rabbit and may be impacted: - cn.hdfk7.boot:hdfk7-boot-starter-common 4.0.0 - com.avides.spring:spring-rabbit...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +102 more potentially affected by CVE-2026-59275 via org.springframework.amqp:spring-rabbit (>=4.0.0, <=4.0.4)

org.springframework.amqp:spring-rabbit MAVEN version =4.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-59275 Source advisory: MEND:CVE-2026-59275...

cn.hdfk7.boot:hdfk7-boot-starter-common (4.0.0), com.avides.spring:spring-rabbit (5.0.0-rc1) +102 more potentially affected by CVE-2026-59275 via org.springframework.amqp:spring-rabbit (4.1.0)

org.springframework.amqp:spring-rabbit MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-rabbit and may be impacted: - cn.hdfk7.boot:hdfk7-boot-starter-common 4.0.0 - com.avides.spring:spring-rabbit...

org.springframework.amqp:spring-rabbit-test (>=4.0.0, <=4.0.4), org.springframework.boot:spring-boot-starter-amqp-test (>=4.0.0, <=4.0.7) potentially affected by CVE-2026-59271 via org.springframework.amqp:spring-rabbit-junit (>=4.0.0, <=4.0.4)

org.springframework.amqp:spring-rabbit-junit MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.7 Source cves: CVE-2026-59271 Source advisory: MEND:CVE-2026-59271...

org.springframework.amqp:spring-rabbit-test (>=4.0.0-m1, <=4.0.4), org.springframework.boot:spring-boot-starter-amqp-test (>=4.0.0-rc2, <=4.0.7) potentially affected by CVE-2026-59271 via org.springframework.amqp:spring-rabbit-junit (>=4.0.0-m1, <=4.0.4)

org.springframework.amqp:spring-rabbit-junit MAVEN version =4.0.0-m1, =4.0.0-m1, =4.0.0-rc2, =4.0.7 Source cves: CVE-2026-59271 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-19267402...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +103 more potentially affected by CVE-2026-59272 via org.springframework.amqp:spring-rabbit (>=4.0.0-m1, <=4.0.4)

org.springframework.amqp:spring-rabbit MAVEN version =4.0.0-m1, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-59272 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKAMQP-19267969...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation via the AmqpAppender. An attacker can intercept or modify sensitive log data by performing a man-in-the-middle attack on the TLS connection, as hostname verification is disabled by default. Remediation...

cn.hdfk7.boot:hdfk7-boot-starter-common (4.0.0), com.avides.spring:spring-rabbit (5.0.0-rc1) +102 more potentially affected by CVE-2026-59272 via org.springframework.amqp:spring-rabbit (4.1.0)

org.springframework.amqp:spring-rabbit MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-rabbit and may be impacted: - cn.hdfk7.boot:hdfk7-boot-starter-common 4.0.0 - com.avides.spring:spring-rabbit...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the BrokerNotAliveException message when the RabbitMQ management aliveness check fails. An attacker can obtain sensitive credentials by accessing exception messages that are logged,...