DEBIAN-CVE-2026-67408

RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service. rabbitMQ 4.3.1 with rabbitmqstreammanagement enabled accepts PUT /api/stream/super-streams/vhost/name reques...

Linux Distros Unpatched Vulnerability : CVE-2026-67408

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.1.0 until 4.3.3, 4.2.9, and 4.1.11, Stream Management Super-Stream Binding Keys Allocation Allows...

DEBIAN-CVE-2026-67218

RabbitMQ is a messaging and streaming broker. Prior to versions 4.0.22, 4.1.11, 4.2.6, and 4.3.0, acceptcontent/2 at line 56 calls rabbitstreammanager:createsuperstream/... directly after isauthorized which only checks the management tag + vhost access via isauthorizedvhost. The stream-protocol...

CVE-2026-67218

RabbitMQ messaging and streaming broker versions prior to 4.0.22, 4.1.11, 4.2.6, and 4.3.0 are vulnerable to a privilege escalation flaw. The HTTP handler for accept_content/2 fails to call rabbit_stream_utils:check_super_stream_management_permitted/4, which is required to enforce configure permi...

Malicious code in super-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e875ac4f4d2ba4b87d745da6afa57744f7c01de2c5dbb54f5aa61e28dfce08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6352 Malicious code in super-streams (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9e875ac4f4d2ba4b87d745da6afa57744f7c01de2c5dbb54f5aa61e28dfce08 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...