{"schemaVersion":3,"id":"CVE-2026-63337","aliases":["UBUNTU-CVE-2026-63337","DEBIAN-CVE-2026-63337","CGA-2cq2-m4p9-fg4r","CGA-378j-4hc2-j5ph","CGA-3crp-vq5w-xpf2","CGA-3cw2-rhfx-38qh","CGA-48cp-6h25-x226","CGA-4g6m-q4rm-hc5v","CGA-66fj-hxc5-hffh","CGA-69wm-66pv-fpgj","CGA-963m-pc36-c959","CGA-fvf3-x3m2-4mxw","CGA-hqvw-mmgm-xchj","CGA-jgw5-67mf-5hvf","CGA-mv84-g5g4-vg2g","CGA-pqv6-fwrc-44gm","CGA-q6qx-5j96-vmpf","CGA-rhmx-p5mv-657x","CGA-rmq2-7qr4-c68m","CGA-wvjj-6qm3-f6wv","CGA-xpxj-prh2-8m9p","CGA-22xh-383j-mpmv","CGA-2h57-m4wm-q2f4","CGA-2h67-7rch-pr5w","CGA-2j8x-rr4j-5m33","CGA-2phq-w2p3-h673","CGA-49v7-4gv3-c7p5","CGA-5p4p-3qc9-x6jw","CGA-8g76-j29x-fj86","CGA-8jc8-vcj9-7g9q","CGA-97gr-8g4p-v7xc","CGA-9hg9-vqwv-jhw2","CGA-9jf4-p9hx-fm5h","CGA-cf54-fvcx-vxrr","CGA-fwm9-p5fr-fc8v","CGA-gggq-5fhc-pm4g","CGA-gj2j-hg98-q4h6","CGA-gjwg-g6cg-vmc9","CGA-h93m-xg6w-v6hp","CGA-hgrc-9rp9-w2fq","CGA-hrvp-hv8p-5c43","CGA-mcg2-9jgw-92mx","CGA-mrfr-945x-83vj","CGA-p564-7vmp-c4wm","CGA-pmvg-qf63-3mg4","CGA-ppr7-xcf4-xxf8","CGA-pqp6-85ww-8382","CGA-pvcm-fwrm-6x54","GHSA-6g32-pxv4-2wfj","CGA-q7hx-7x95-hp7m","CGA-qf9x-q59r-4jr9","CGA-qmcp-cw4m-64m6","CGA-qqj9-hh7g-qw8c","CGA-vq58-cvmf-fhqh","CGA-w644-fq9h-g2c4","CGA-wh83-6f46-jp4q"],"status":"published","duplicateOf":null,"title":null,"description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill, setJavaReturnType, and computeReturnTypeAsJavaClass to Class.forName(javaReturnType) with initialization enabled. An attacker able to answer the JsonRpcClient request through a shared broker or network interception can select a class already present in the victim JVM and trigger its static initializer, while JsonRpcClient.java later passes getReturnType output to mapper.parse and may also create type confusion. Successful exploitation can affect confidentiality, integrity, and availability in the client process. This issue is fixed in version 5.33.0.","dates":{"published":"2026-08-18T16:27:09.782Z","modified":"2026-08-18T19:09:03.371Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":7.5,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00557,"percentile":0.45298,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.24000000000000002,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00317},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00557,"percentile":0.45298}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00317,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00557,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00557,"percentile":0.45298}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-470","name":"Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')","description":"The product uses external input with reflection to select which classes or code to use, but it does not sufficiently prevent the input from selecting improper classes or code.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/470.html"}],"affected":[{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.32.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.32.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r54 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.20-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5","name":"logstash-9.5","label":"logstash-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5-iamguarded-compat","name":"logstash-9.5-iamguarded-compat","label":"logstash-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5","name":"logstash-fips-9.5","label":"logstash-fips-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5-iamguarded-compat","name":"logstash-fips-9.5-iamguarded-compat","label":"logstash-fips-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"< 2023.45-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2023.45-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"< 6.14.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"< 6.14.5-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r54 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"debian","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"com.rabbitmq:amqp-client","label":"amqp-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.rabbitmq/amqp-client","purlType":"maven","versions":[{"text":"< 5.33.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.0","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.33.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.0","eol":null,"hubHref":"/vendor/rabbitmq/rabbitmq-java-client"}],"affectedCount":39,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-6g32-pxv4-2wfj","label":"github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-6g32-pxv4-2wfj","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2000","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2000","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2002","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2002","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/0032f75f9dc3df847f94b2b85a16119250bf63cb","label":"github.com/rabbitmq/rabbitmq-java-client/commit/0032f75f9dc3df847f94b2b85a16119250bf63cb","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/9f8e7efd0c648f235dc0e96232ae7efa75ea4fa8","label":"github.com/rabbitmq/rabbitmq-java-client/commit/9f8e7efd0c648f235dc0e96232ae7efa75ea4fa8","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.0","label":"github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.0","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-63337","label":"ubuntu.com/security/CVE-2026-63337","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-63337","label":"www.cve.org/CVERecord?id=CVE-2026-63337","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-63337","label":"security-tracker.debian.org/tracker/CVE-2026-63337","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63337.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63337.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63337","label":"nvd.nist.gov/vuln/detail/CVE-2026-63337","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client","label":"github.com/rabbitmq/rabbitmq-java-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-F8FR-G9GW-GWRH"]},"timeline":[{"kind":"published","date":"2026-08-18T16:27:09.782Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-18T19:09:03.371Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":30,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T04:08:59.039Z","stale":false,"partial":false}}