{"schemaVersion":3,"id":"CVE-2026-106121","aliases":["UBUNTU-CVE-2026-106121","DEBIAN-CVE-2026-106121","CGA-2x39-vpqc-q2vx","CGA-2xr5-jc33-g28h","CGA-4j67-wjwc-vw9f","CGA-4p58-q3hw-v9fp","CGA-52mx-48qm-vwxv","CGA-627x-3xrf-77mp","CGA-73h8-hmcc-53fv","CGA-7882-85mv-7jfm","CGA-8xvj-5mrg-5g35","CGA-9fh7-h5gj-4cf9","CGA-9mj4-88m8-gqp4","CGA-cc6p-mhjx-gmr9","CGA-gxvm-2gx3-w3pr","CGA-qmfm-pp5v-263m","CGA-qwc6-3qhc-3h4f","CGA-xr3v-44mf-c3g3","CGA-2vhm-6455-p6fr","CGA-37wx-44m7-w4m9","CGA-5hqr-7c7h-9fmf","CGA-629r-xmp3-7vcp","CGA-6x5m-c9qv-v32r","CGA-8jgm-mjpr-8p2g","CGA-96xv-q24j-xqwf","CGA-c4jw-3q3w-jm5g","CGA-c6rj-mwvw-pr3m","CGA-cqw2-gh4h-7g59","CGA-f39h-g5rf-8q7g","CGA-f794-mrrm-mgw9","CGA-fh9x-7q58-jq24","CGA-fpwc-q43q-jhxf","CGA-fqrr-5jxr-qpcf","CGA-fqv3-8c9c-6h9c","CGA-h6h5-572x-579c","CGA-hrf9-6wpv-366m","CGA-jfj8-m9c6-5p22","CGA-jgc2-qf4f-5m2f","CGA-mwq8-9phh-gw5h","CGA-p2f7-x8rw-p7jj","CGA-p9g9-r937-x23j","CGA-pcg3-8jwp-44xf","CGA-pg9m-jgj2-qj36","CGA-pmmx-826p-v64r","GHSA-cqgh-8p3p-mx4m","CGA-r2f9-9pv2-j563","CGA-r56q-h24h-fhpr","CGA-r993-fqr5-j8h2","CGA-rp4r-jrf9-5q33","CGA-xp5v-53gm-7fw4","CGA-rc85-x958-r9cm","CGA-v42p-x656-rc3r","CGA-vjm6-8vp8-6ghh","CGA-w646-5824-5x8r","CGA-w85q-qf99-fvmp","CGA-xh94-ghvq-j63c","CGA-xhp2-qr49-j2jc","CGA-xmh5-w32c-jww7","CGA-xrqq-rwff-vv2h","CGA-5pgv-cgwj-5mjp","CGA-pgjh-v2h8-2mw3","CGA-q7hm-h977-j6xh","CGA-8hg8-xxjh-v7hf"],"status":"published","duplicateOf":null,"title":null,"description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners do not stop at CharacterIterator.DONE. The default DefaultJsonRpcMapper passes JSON-RPC message bodies to this parser for JsonRpcServer and client replies. A truncated string causes the parser to append replacement end markers until heap exhaustion, while a line comment without a terminating newline can keep a thread consuming CPU indefinitely, resulting in denial of service. This issue is fixed in version 5.37.0.","dates":{"published":"2026-10-06T18:08:52.026Z","modified":"2026-10-06T18:32:46.845Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Maven","score":4.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","exploitability":3.1,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00501,"percentile":0.41647,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-07T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00501,"percentile":0.41647}],"last30":[{"date":"2026-10-07T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00493,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00501,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00501,"percentile":0.41647}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_RABBITMQ_RABBITMQ-JAVA-CLIENT","name":"Rabbitmq Java Client","source":"github","url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-835","name":"Loop with Unreachable Exit Condition ('Infinite Loop')","description":"The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/835.html"}],"affected":[{"vendor":"chainguard","product":"apache-nifi-2.11","name":"apache-nifi-2.11","label":"apache-nifi-2.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-2.11","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-2.12","name":"apache-nifi-2.12","label":"apache-nifi-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-2.12","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2.12.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2.12.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.1-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.32.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.32.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 38.0.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 38.0.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5","name":"logstash-9.5","label":"logstash-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5-iamguarded-compat","name":"logstash-9.5-iamguarded-compat","label":"logstash-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.8-r0","noFixRecorded":false,"fixedIn":null},{"text":"< 9.4.8-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.8-r0 | < 9.4.8-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.8-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 9.4.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.8-r2 | < 9.4.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5","name":"logstash-fips-9.5","label":"logstash-fips-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5-iamguarded-compat","name":"logstash-fips-9.5-iamguarded-compat","label":"logstash-fips-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2023.45-r25","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2023.45-r25","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2025","name":"nuxeo-2025","label":"nuxeo-2025","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2025","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 2025.20-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 2025.20-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.16.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.16.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 6.16.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 6.16.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.1-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.1-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 38.0.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 38.0.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"amqp-client","label":"amqp-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.1","eol":null,"hubHref":"/vendor/comrabbitmq/amqp-client"},{"vendor":"debian","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"com.rabbitmq:amqp-client","label":"amqp-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.rabbitmq/amqp-client","purlType":"maven","versions":[{"text":"< 5.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.1","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.1","eol":null,"hubHref":"/vendor/rabbitmq/rabbitmq-java-client"},{"vendor":"vmware","product":"rabbitmq_java_client","name":"rabbitmq java client","label":"rabbitmq_java_client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.37.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.37.0","eol":null,"hubHref":"/vendor/vmware/rabbitmq_java_client"}],"affectedCount":42,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-cqgh-8p3p-mx4m","label":"github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-cqgh-8p3p-mx4m","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2100","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2100","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/25fad817291feff3195c32620117d295598f8b41","label":"github.com/rabbitmq/rabbitmq-java-client/commit/25fad817291feff3195c32620117d295598f8b41","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.37.0","label":"github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.37.0","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-106121","label":"ubuntu.com/security/CVE-2026-106121","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106121","label":"www.cve.org/CVERecord?id=CVE-2026-106121","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-106121","label":"security-tracker.debian.org/tracker/CVE-2026-106121","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106121.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106121.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106121","label":"nvd.nist.gov/vuln/detail/CVE-2026-106121","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client","label":"github.com/rabbitmq/rabbitmq-java-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-06T18:08:52.026Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-06T18:32:46.845Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T17:04:24.275Z","stale":false,"partial":false}}