rabbitmq-java-client — Vulnerabilities & Security Advisories 7

All 7 CVE vulnerabilities found in rabbitmq-java-client, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-61634	RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max CWE-20	-	-	2026-08-18
CVE-2026-63336	RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM CWE-295	5.1	Medium	2026-08-18
CVE-2026-63337	RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading CWE-470	7.5	High	2026-08-18
CVE-2026-69220	RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS CWE-674	8.7	High	2026-08-18
CVE-2026-69219	RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation CWE-789	8.7	High	2026-08-18
CVE-2026-63335	RabbitMQ Java client malformed body frame triggers raw command assembler exception CWE-20	6.3	Medium	2026-08-18
CVE-2023-46120	RabbitMQ Java client's lack of message size limitation leads to remote DoS attack CWE-400	4.9	Medium	2023-10-24

All 7 known CVE vulnerabilities affecting rabbitmq-java-client with full Chinese analysis, references, and POCs where available.