{"schemaVersion":3,"id":"CVE-2026-106122","aliases":["UBUNTU-CVE-2026-106122","DEBIAN-CVE-2026-106122","CGA-25q8-x9mm-64qh","CGA-2c9g-77hw-8mj9","CGA-2rgj-q4hr-h9mp","CGA-6g58-g47j-5w9f","CGA-7jj4-6mqp-m5c7","CGA-94mm-7rc3-prhc","CGA-cq7w-m9qh-2h3c","CGA-f8p2-39p6-84c2","CGA-gghr-xm86-722f","CGA-mrjr-j8j2-4pwh","CGA-v5q8-w2gr-qrx8","CGA-v84h-xq8r-c8wf","CGA-w7c6-c5qc-2qqj","CGA-xc4m-r952-pcgc","CGA-xfgr-qqf2-hr32","CGA-xp9r-gqqh-r793","CGA-26j8-rxj3-xpg5","CGA-29hv-xm82-f57g","CGA-36q2-v3cw-72rp","CGA-373m-5hcm-mv3g","CGA-3h5x-c4rv-rqfh","CGA-466r-xgf6-5pg3","CGA-4v4v-mh8w-8v32","CGA-678x-qxmj-xvhw","CGA-6h46-m9vf-52hx","CGA-8c2g-g6wf-3xqg","CGA-8g83-wxcv-c8r4","CGA-978x-pw45-cjww","CGA-97qq-gqf8-h5hp","CGA-995x-v593-xw9r","CGA-9g7v-43c9-hg6v","CGA-9h8m-4qhq-c4hh","CGA-9x7g-jwxp-3j38","CGA-f83c-84c4-hrg5","CGA-fhcv-g6mv-jc47","CGA-fqmv-q4ph-7vj9","CGA-g3wj-wm4c-3cj8","CGA-g6j3-mgcp-468w","CGA-h6jh-4rjq-4cv6","CGA-h6x9-rqhh-2xr4","CGA-h76q-29h5-mgf4","CGA-hm95-rcc9-4j4g","CGA-jprv-4v4f-c8wh","CGA-p2p4-9q4h-xw9m","CGA-p7h5-c45h-qx8x","GHSA-7822-rcf6-97fx","CGA-rw52-rrjg-pwj9","CGA-wj67-2vq6-85x9","CGA-wr8h-gcm7-hxgq","CGA-xrq6-w8jq-4vqg","CGA-q3g6-mqh3-p54j","CGA-q3jr-vgqc-wx8c","CGA-q569-2v6j-qvjx","CGA-qfrq-264r-g585","CGA-r236-6fqv-42mc","CGA-r3gf-w8qv-8vf7","CGA-w5g9-339v-g463","CGA-5c8w-mf2v-qgxv","CGA-hwm4-29qw-3hhq","CGA-pp6g-8j3v-786m","CGA-9v37-c6vj-mhc4"],"status":"published","duplicateOf":null,"title":null,"description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by ValueWriter.writeShortstr. An attacker who can submit an RPC message with a malformed echoed property can cause reply publication in RpcServer.mainloop() or tutorial-style consumers to throw an unchecked exception before acknowledgement. The broker requeues the message, allowing the same message to disable replacement consumers until the queue is purged. This issue is fixed in version 5.36.0.","dates":{"published":"2026-10-06T18:10:18.748Z","modified":"2026-10-06T18:23:24.929Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00478,"percentile":0.3994,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00478,"percentile":0.3994}],"last30":[{"date":"2026-10-07T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00409,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00478,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00478,"percentile":0.3994}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"GITHUB_RABBITMQ_RABBITMQ-JAVA-CLIENT","name":"Rabbitmq Java Client","source":"github","url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-mm8h-8587-p46h","maturity":"poc","reliabilityScore":0.3,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-172","name":"Encoding Error","description":"The product does not properly encode or decode the data, resulting in unexpected values.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/172.html"},{"id":"CWE-248","name":"Uncaught Exception","description":"An exception is thrown from a function, but it is not caught.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/248.html"}],"affected":[{"vendor":"chainguard","product":"apache-nifi-2.11","name":"apache-nifi-2.11","label":"apache-nifi-2.11","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-2.11","purlType":"apk","versions":[{"text":"< 2.11.0-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.11.0-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-nifi-2.12","name":"apache-nifi-2.12","label":"apache-nifi-2.12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-nifi-2.12","purlType":"apk","versions":[{"text":"< 2.12.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.12.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.32.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.32.5-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.5-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 38.0.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 38.0.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.23-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.23-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5","name":"logstash-9.5","label":"logstash-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5-iamguarded-compat","name":"logstash-9.5-iamguarded-compat","label":"logstash-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.8-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 9.4.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.8-r2 | < 9.4.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.8-r2","noFixRecorded":false,"fixedIn":null},{"text":"< 9.4.8-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.8-r2 | < 9.4.8-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5","name":"logstash-fips-9.5","label":"logstash-fips-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5-iamguarded-compat","name":"logstash-fips-9.5-iamguarded-compat","label":"logstash-fips-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.5.4-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.5.4-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"< 2023.45-r24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2023.45-r24","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2025","name":"nuxeo-2025","label":"nuxeo-2025","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2025","purlType":"apk","versions":[{"text":"< 2025.20-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.20-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"< 6.16.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.16.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"< 6.16.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.16.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.1-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 38.0.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 38.0.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 9.4.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 9.4.7-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.5-r7","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"amqp-client","label":"amqp-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.0","eol":null,"hubHref":"/vendor/comrabbitmq/amqp-client"},{"vendor":"debian","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"com.rabbitmq:amqp-client","label":"amqp-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.rabbitmq/amqp-client","purlType":"maven","versions":[{"text":"< 5.36.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.0","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.0","eol":null,"hubHref":"/vendor/rabbitmq/rabbitmq-java-client"},{"vendor":"vmware","product":"rabbitmq_java_client","name":"rabbitmq java client","label":"rabbitmq_java_client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.0","eol":null,"hubHref":"/vendor/vmware/rabbitmq_java_client"}],"affectedCount":42,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-7822-rcf6-97fx","label":"github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-7822-rcf6-97fx","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Exploit","Vendor Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2065","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2065","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/b8bd750fa8c90690e859b18d6343b34421309020","label":"github.com/rabbitmq/rabbitmq-java-client/commit/b8bd750fa8c90690e859b18d6343b34421309020","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB","Patch"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.36.0","label":"github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.36.0","hostname":"github.com","tags":["X Refsource MISC","WEB","Release Notes"]},{"url":"https://ubuntu.com/security/CVE-2026-106122","label":"ubuntu.com/security/CVE-2026-106122","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106122","label":"www.cve.org/CVERecord?id=CVE-2026-106122","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-106122","label":"security-tracker.debian.org/tracker/CVE-2026-106122","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106122.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/106xxx/CVE-2026-106122.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106122","label":"nvd.nist.gov/vuln/detail/CVE-2026-106122","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client","label":"github.com/rabbitmq/rabbitmq-java-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-06T18:10:18.748Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-06T18:23:24.929Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":40,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T22:25:32.797Z","stale":false,"partial":false}}