github.com/rabbitmq/amqp091-go
An AMQP 0-9-1 Go client maintained by the RabbitMQ team. Originally by @streadway: `streadway/amqp`
Activity
- Latest release
- 1w ago
- Total releases
- 24
- Cadence
- ~39 days
- Last 12 months
- 6
Reach
- Stars
- 2.0k
Details
- First release
- Sep 21, 2021
| Version | Released | |
|---|---|---|
v1.16.0
minor
|
v1.16.0
minor
Dependencies (1)
|
|
v1.15.0
minor
|
v1.15.0
minor
Dependencies (1)
|
|
v1.14.0
minor
|
v1.14.0
minor
Dependencies (1)
|
|
v1.13.0
minor
1 CVE
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (1)
|
|
v1.12.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.12.0
minor
Dependencies (1)
|
|
v1.11.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.11.0
minor
Dependencies (1)
|
|
v1.10.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.10.0
minor
Dependencies (1)
|
|
v1.9.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.9.0
minor
Dependencies (1)
|
|
v1.8.1
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.8.1
patch
Dependencies (1)
|
|
v1.8.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.8.0
minor
Dependencies (1)
|
|
v1.7.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.7.0
minor
Dependencies (1)
|
|
v1.6.1
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.6.1
patch
Dependencies (1)
|
|
v1.6.1-rc.2
pre
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.6.1-rc.2
pre
Dependencies (1)
|
|
v1.6.1-rc.1
pre
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.6.1-rc.1
pre
Dependencies (1)
|
|
v1.6.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.6.0
minor
Dependencies (1)
|
|
v1.5.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.5.0
minor
Dependencies (1)
|
|
v1.4.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.4.0
minor
Dependencies (1)
|
|
v1.3.4
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.3.4
patch
|
|
v1.3.3
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.3.3
patch
|
|
v1.3.2
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.3.2
patch
|
|
v1.3.1
patch
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.3.1
patch
|
|
v1.3.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.3.0
minor
|
|
v1.2.0
minor
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.2.0
minor
|
|
v1.1.0
initial
11 CVEs
CVE-2026-107386
GO-2026-6700
GHSA-w6r9-248c-frg8
Oct 19, 2026
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go Fixed in
1.14.0
References Updated Oct 19, 2026 · Source: OSV.dev
CVE-2026-77403
GO-2026-6503
GHSA-xwwf-m8fg-p9q2
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Sub-Spec Frame Size Negotiation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77404
GO-2026-6493
GHSA-465g-fh3v-9jw4
Oct 01, 2026
RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS Path Parameter Injection in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77405
GO-2026-6492
GHSA-33mj-cw25-m34h
Oct 01, 2026
RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration In URI Parser in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77407
GO-2026-6491
GHSA-27gv-rfvv-22mv
Oct 01, 2026
RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Plaintext Credential Exposure via Exported PLAIN Authentication Struct Fields in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77412
GO-2026-6494
GHSA-4v58-74mf-rjx3
Oct 01, 2026
RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Denial of Service via Malicious Field Length in AMQP Client in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77411
GO-2026-6496
GHSA-c5pq-fr2g-9jpf
Oct 01, 2026
RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Protocol Desynchronization and Frame Injection via Integer Overflow in readLongstr in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77408
GO-2026-6498
GHSA-j497-x9hr-x34x
Oct 01, 2026
RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr Integer Overflow in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77410
GO-2026-6500
GHSA-r9c8-gcjp-xfwh
Oct 01, 2026
RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Resource Exhaustion (OOM) via Unbounded Body Buffer Allocation in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-77406
GO-2026-6502
GHSA-rm6m-hrcw-jw33
Oct 01, 2026
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References
Updated Oct 01, 2026 · Source: OSV.dev
CVE-2026-79921
GO-2026-6372
GHSA-6c5v-hqjr-5xxp
Sep 15, 2026
Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload in github.com/rabbitmq/amqp091-go Fixed in
1.13.0
References Updated Sep 15, 2026 · Source: OSV.dev |
v1.1.0
initial
|