GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
5 advisories
RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
High
CVE-2026-75516
was published
for
com.rabbitmq:amqp-client
(Maven)
Sep 17, 2026
RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
Moderate
CVE-2026-63336
was published
for
com.rabbitmq:amqp-client
(Maven)
Aug 18, 2026
RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading
High
CVE-2026-63337
was published
for
com.rabbitmq:amqp-client
(Maven)
Aug 18, 2026
RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation
High
CVE-2026-69219
was published
for
com.rabbitmq:amqp-client
(Maven)
Aug 18, 2026
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
High
CVE-2026-69220
was published
for
com.rabbitmq:amqp-client
(Maven)
Aug 18, 2026
ProTip!
Advisories are also available from the
GraphQL API