rabbitmq amqp091-go
12 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-107386 | >= 1.13.0, < 1.14.0 | amqp091-go: Pre-negotiation frame limit is not enforced to 4KB | MEDIUM 6.3 | 0.5 % | ||
| CVE-2026-77409 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Synchronous Event Channel Blocking | HIGH 8.2 | 0.5 % | ||
| CVE-2026-77411 | < 1.13.0 | RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr | CRITICAL 9.5 | 0.5 % | ||
| CVE-2026-77412 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77405 | < 1.13.0 | RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser | CRITICAL 9.4 | 0.3 % | ||
| CVE-2026-77404 | < 1.13.0 | RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection | HIGH 8.7 | 0.1 % | ||
| CVE-2026-77410 | < 1.13.0 | RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77406 | < 1.13.0 | RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration | HIGH 8.2 | 0.5 % | ||
| CVE-2026-77403 | < 1.13.0 | RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation | HIGH 8.9 | 0.5 % | ||
| CVE-2026-77407 | < 1.13.0 | RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields | HIGH 7.0 | 0.1 % | ||
| CVE-2026-77408 | < 1.13.0 | RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow | CRITICAL 9.1 | 0.5 % | ||
| CVE-2026-79921 | < 1.13.0 | amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload | HIGH 8.9 | 0.5 % |