rabbitmq amqp091-go
12 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107386 | >= 1.13.0, < 1.14.0 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KB | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-77409 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking | HIGH 8.2 | 0.5 % | ||
| CVE-2026-77411 | < 1.13.0 | RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr | CRITICAL 9.5 | 0.5 % | ||
| CVE-2026-77412 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77405 | < 1.13.0 | RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-77404 | < 1.13.0 | RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection | HIGH 8.7 | 0.1 % | ||
| CVE-2026-77410 | < 1.13.0 | RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77406 | < 1.13.0 | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration | HIGH 8.2 | 0.5 % | ||
| CVE-2026-77403 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77407 | < 1.13.0 | RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields | HIGH 7.0 | 0.1 % | ||
| CVE-2026-77408 | < 1.13.0 | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-79921 | < 1.13.0 | amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload | HIGH 8.9 | 0.5 % |