Rabbitmq Rabbitmq-java-client vulnerabilities

• vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() CVE-2026-106123 Fix available 5.7 MediumOctober 6, 2026
• vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers CVE-2026-106122 Fix available 6.0 MediumOctober 6, 2026
• vmware rabbitmq java client, com.rabbitmq amqp-client, rabbitmq rabbitmq-java-client +2 more RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS CVE-2026-106121 Fix available 4.9 MediumOctober 6, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement CVE-2026-75516 Fix available 8.7 HighSeptember 16, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max CVE-2026-61634 Fix available 0.0 NoneAugust 18, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM CVE-2026-63336 Fix available 5.1 MediumAugust 18, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading CVE-2026-63337 Fix available 7.5 HighAugust 18, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS CVE-2026-69220 Fix available 8.7 HighAugust 18, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation CVE-2026-69219 Fix available 8.7 HighAugust 18, 2026
• rabbitmq rabbitmq-java-client RabbitMQ Java client malformed body frame triggers raw command assembler exception CVE-2026-63335 Fix available 6.3 MediumAugust 18, 2026
• vmware rabbitmq java client, rabbitmq rabbitmq-java-client +1 more RabbitMQ Java client's lack of message size limitation leads to remote DoS attack CVE-2023-46120 Fix available 4.9 MediumOctober 24, 2023