CVE-2023-46120

CVE-2023-46120 affects the RabbitMQ Java Client. The issue arises because maxBodyLebgth was not used when receiving Message objects, allowing an attacker to send a very large Message that could cause memory overflow and DoS/OOM in the consumer. The vulnerability is patched in RabbitMQ Java Client...

CVE-2018-11087

CVE-2018-11087 affects Pivotal Spring AMQP and RabbitMQ amqp-client. The issue arises from improper hostname validation, enabling a man-in-the-middle attacker to intercept traffic and view data in transit. Documented impact includes information disclosure due to lack of hostname verification. IBM...

CVE-2026-106122

The RabbitMQ Java client library (prior to version 5.36.0 ) is vulnerable to an encoding error in the ValueReader.readShortstr method. This method improperly decodes malformed UTF-8 bytes into replacement characters, which can bypass the AMQP shortstr length limits enforced by ValueWriter.writeSh...

CVE-2026-106123

The RabbitMQ Java client library allows Java and JVM-based applications to interact with RabbitMQ nodes. Prior to version 5.35.0 , the ConnectionFactoryConfigurator.load() method includes the raw URI value in wrapped exceptions when AMQP URI parsing fails. Because these URIs may contain plaintext...

CVE-2026-106121

The RabbitMQ Java client library (prior to version 5.37.0 ) contains a vulnerability in com.rabbitmq.tools.json.JSONReader.read() where the parser fails to terminate at the end of input when encountering a quoted string or a line comment. This occurs because the string and whitespace scanners do ...