https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 11:31:24 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05248 bdu:2021-05248 https://cve.radiocsirt.org/vuln/bdu:2021-05248 https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-22116 <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> <p><strong>Affected:</strong> Bitnami: rabbitmq</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> https://cve.radiocsirt.org/vuln/bit-rabbitmq-2021-22116 https://cve.radiocsirt.org/vuln/euvd-2026-22674 EUVD-2026-22674 https://cve.radiocsirt.org/vuln/euvd-2026-22674 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22116 <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-22116 https://cve.radiocsirt.org/vuln/ghsa-5hjq-8gx9-79g4 <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> https://cve.radiocsirt.org/vuln/ghsa-5hjq-8gx9-79g4 https://cve.radiocsirt.org/vuln/gsd-2021-22116 gsd-2021-22116 https://cve.radiocsirt.org/vuln/gsd-2021-22116 https://cve.radiocsirt.org/vuln/oesa-2026-3940 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: rabbitmq-server</p> <p>RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fix(es):</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.(CVE-2021-22116)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange to execute JavaScript in another user&amp;apos;s browser. This issue is fixed in version 4.2.5.(CVE-2026-57214)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile direct-reply-to queues can be accepted at bind and route time but are missing from Khepri-backed deletion checks, leaving persistent route entries after unbind. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.(CVE-2026-57215)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol auth…</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP4: rabbitmq-server</p> <p>RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fix(es):</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.(CVE-2021-22116)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 4.2.5, the RabbitMQ management UI renders the x-internal-purpose queue or exchange argument into an HTML title attribute without proper escaping on the Queues and Exchanges pages, allowing a user with permission to declare a queue or exchange to execute JavaScript in another user&amp;apos;s browser. This issue is fixed in version 4.2.5.(CVE-2026-57214)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, RabbitMQ allows foreign bindings to amq.rabbitmq.reply-to destinations because volatile direct-reply-to queues can be accepted at bind and route time but are missing from Khepri-backed deletion checks, leaving persistent route entries after unbind. This issue is fixed in versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.(CVE-2026-57215)</p> <p>RabbitMQ is a messaging and streaming broker. Prior to 3.13.15, 4.0.20, 4.1.11, and 4.2.6, AMQP 0-9-1, AMQP 1.0, and Stream Protocol auth…</p> https://cve.radiocsirt.org/vuln/oesa-2026-3940 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 <p>Security update for rabbitmq-server</p> <p>Security update for rabbitmq-server</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1334-1 https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> <p>Feature update for rabbitmq-server313, erlang26, elixir115</p> https://cve.radiocsirt.org/vuln/suse-fu-2024:2078-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22116 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rabbitmq-server, Ubuntu:18.04:LTS: rabbitmq-server, Ubuntu:20.04:LTS: rabbitmq-server, Ubuntu:22.04:LTS: rabbitmq-server</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: rabbitmq-server, Ubuntu:18.04:LTS: rabbitmq-server, Ubuntu:20.04:LTS: rabbitmq-server, Ubuntu:22.04:LTS: rabbitmq-server</p> <p>RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can exploit the vulnerability by sending malicious AMQP messages to the target RabbitMQ instance having the AMQP 1.0 plugin enabled.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22116