{"schemaVersion":3,"id":"CVE-2026-61634","aliases":["UBUNTU-CVE-2026-61634","DEBIAN-CVE-2026-61634","CGA-2hwf-xhpw-cv2h","CGA-2w9j-wfhf-r95q","CGA-6vh8-fr6h-jgwv","CGA-75hc-2v9p-xfhr","CGA-75jx-2x2j-vwgr","CGA-8j49-r86c-vm39","CGA-98mx-45jw-28h8","CGA-9gm5-xx2g-xhf6","CGA-c7jh-93m5-gv8f","CGA-f63h-wqvx-jm82","CGA-fmxf-vfwx-h5r3","CGA-gmfx-6mxf-wq7v","CGA-jxjp-hrh5-7ccr","CGA-p432-8c5q-4wc7","CGA-pp73-38vw-wm9q","CGA-pw2c-m86m-h2g2","CGA-qp2v-hcgx-rqx6","CGA-r834-7458-qggw","CGA-rcr9-6j5c-rv3p","CGA-2q3p-q8pr-72m5","CGA-3x5g-cpjj-2pfc","CGA-4c7f-xrgg-9p73","CGA-59qc-xhqr-6gvf","CGA-6mx4-fhh2-wgj5","CGA-7833-99c6-6qv5","CGA-7fj7-7hhf-6fmf","CGA-7w66-xh6g-h48v","CGA-88hp-hpff-px4w","CGA-8c83-rg54-xm45","CGA-9884-9xm6-fc8x","CGA-9hfx-7hwr-9prx","CGA-crp2-mvrq-g756","CGA-g3g4-25rh-2r5q","CGA-g769-524g-h479","CGA-h44g-fv26-fqf6","CGA-h959-6cm4-x7c5","CGA-jjf4-78v6-946q","CGA-jqgj-29g7-3mvj","CGA-mw55-4648-64g6","CGA-p8cc-rpf3-366v","CGA-pj96-jmqg-cfhq","GHSA-5xwg-cfvj-gff5","CGA-qmh6-g7q6-37hx","CGA-qmxm-f5j9-7jr5","CGA-qw48-jx55-x25c","CGA-r44f-qh7r-42rc","CGA-r5qj-9wch-hjgm","CGA-rr3v-r545-gv5r","CGA-w9pv-7c4c-q8m4","CGA-wxp2-j4m7-hwgr","CGA-x68f-r5fq-x2h8","CGA-xf74-4v2f-rr2p","CGA-xrqh-2qr9-44cc","CGA-xxcj-42mj-cqgp"],"status":"published","duplicateOf":null,"title":null,"description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, the AMQP connection tuning path records the negotiated AMQP frame_max value, but src/main/java/com/rabbitmq/client/impl/SocketFrameHandler.java and NettyFrameHandlerFactory continue to validate broker-controlled frame payload lengths against maxInboundMessageBodySize because the negotiated limit is not applied consistently through setMaxInboundFramePayloadSize. A malicious or compromised broker can send a method frame larger than the negotiated frame_max during or after connection establishment, causing the client to allocate and decode a protocol-invalid frame instead of rejecting it with MalformedFrameException. The protocol violation can disrupt the affected connection and cause client-side denial of service. This issue is fixed in version 5.33.0.","dates":{"published":"2026-08-18T16:32:19.602Z","modified":"2026-08-18T17:27:31.031Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":0,"severity":"unknown","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":0,"severity":"unknown","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00488,"percentile":0.40725,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.18899999999999997,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00299},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00488,"percentile":0.40725}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00299,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00488,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00488,"percentile":0.40725}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.32.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.32.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r54 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5","name":"logstash-9.5","label":"logstash-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5-iamguarded-compat","name":"logstash-9.5-iamguarded-compat","label":"logstash-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5","name":"logstash-fips-9.5","label":"logstash-fips-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5-iamguarded-compat","name":"logstash-fips-9.5-iamguarded-compat","label":"logstash-fips-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"< 2023.45-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2023.45-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"< 6.14.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"< 6.14.5-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r54 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"debian","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"com.rabbitmq:amqp-client","label":"amqp-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.rabbitmq/amqp-client","purlType":"maven","versions":[{"text":"< 5.33.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.0","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.33.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.0","eol":null,"hubHref":"/vendor/rabbitmq/rabbitmq-java-client"}],"affectedCount":39,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-5xwg-cfvj-gff5","label":"github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-5xwg-cfvj-gff5","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/1994","label":"github.com/rabbitmq/rabbitmq-java-client/pull/1994","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/1995","label":"github.com/rabbitmq/rabbitmq-java-client/pull/1995","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/08790f09686173eb17b48d08a25edcb32e71a591","label":"github.com/rabbitmq/rabbitmq-java-client/commit/08790f09686173eb17b48d08a25edcb32e71a591","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/b491075f42e89967610c40beded68d3680cfd472","label":"github.com/rabbitmq/rabbitmq-java-client/commit/b491075f42e89967610c40beded68d3680cfd472","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.0","label":"github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.0","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-61634","label":"ubuntu.com/security/CVE-2026-61634","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61634","label":"www.cve.org/CVERecord?id=CVE-2026-61634","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-61634","label":"security-tracker.debian.org/tracker/CVE-2026-61634","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61634.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/61xxx/CVE-2026-61634.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61634","label":"nvd.nist.gov/vuln/detail/CVE-2026-61634","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client","label":"github.com/rabbitmq/rabbitmq-java-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-8RR9-62HV-H636"]},"timeline":[{"kind":"published","date":"2026-08-18T16:32:19.602Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-18T17:27:31.031Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:11:10.264Z","stale":false,"partial":false}}