https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T17:29:41.499289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-57212 CVE-2026-57212 — RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size 2026-10-07T17:29:41.515960+00:00

Affected: rabbitmq-server

RabbitMQ is a messaging and streaming broker. Prior to 3.13.14, 4.0.19, 4.1.10, and 4.2.5, the rabbitmq_management HTTP API accepts oversized valid JSON bodies on with_decode and direct_request paths because read_complete_body checks the accumulated size before the final chunk but not the final combined size. This issue is fixed in versions 3.13.14, 4.0.19, 4.1.10, and 4.2.5.