PT-2026-105191

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.0, When no CA bundle is available, ssl options/1 falls back to verify, verify none with no warning. An attacker in a man-in-the-middle position can forge the JWKS response, which leads the brok...