rabbitmq-java-client — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in rabbitmq-java-client, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-106123	RabbitMQ Java client: plaintext broker credentials leaked in exception message from ConnectionFactoryConfigurator.load() CWE-209	5.7	Medium	2026-10-06
CVE-2026-106122	RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers CWE-172	6.0	Medium	2026-10-06
CVE-2026-106121	RabbitMQ: JSONReader in the default JSON-RPC mapper never terminates on truncated input, causing DoS CWE-835	4.9	Medium	2026-10-06
CVE-2026-75516	RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement CWE-770	8.7	High	2026-09-16
CVE-2026-61634	RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max CWE-20	-	-	2026-08-18
CVE-2026-63336	RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM CWE-295	5.1	Medium	2026-08-18
CVE-2026-63337	RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading CWE-470	7.5	High	2026-08-18
CVE-2026-69220	RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS CWE-674	8.7	High	2026-08-18
CVE-2026-69219	RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation CWE-789	8.7	High	2026-08-18
CVE-2026-63335	RabbitMQ Java client malformed body frame triggers raw command assembler exception CWE-20	6.3	Medium	2026-08-18
CVE-2023-46120	RabbitMQ Java client's lack of message size limitation leads to remote DoS attack CWE-400	4.9	Medium	2023-10-24

All 11 known CVE vulnerabilities affecting rabbitmq-java-client with full Chinese analysis, references, and POCs where available.