com.rabbitmq:amqp-client vulnerabilities (Maven)
12 vulnerabilities.
com.rabbitmq:amqp-clientMavenRabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load()5.7 Mediumcom.rabbitmq:amqp-clientMavenRabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers6.0 Mediumcom.rabbitmq:amqp-clientMavenRabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS4.9 Mediumcom.rabbitmq:amqp-clientMavenRabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement8.7 Highcom.rabbitmq:amqp-clientMavenRabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max0.0 Nonecom.rabbitmq:amqp-clientMavenRabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM5.1 Mediumcom.rabbitmq:amqp-clientMavenRabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading7.5 Highcom.rabbitmq:amqp-clientMavenRabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS8.7 Highcom.rabbitmq:amqp-clientMavenRabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation8.7 Highcom.rabbitmq:amqp-clientMavenRabbitMQ Java client malformed body frame triggers raw command assembler exception6.3 Mediumcom.rabbitmq:amqp-clientMavenRabbitMQ Java client's lack of message size limitation leads to remote DoS attack4.9 Mediumcom.rabbitmq:amqp-clientMavenTLS validation error5.9 Medium