{"schemaVersion":3,"id":"CVE-2026-69220","aliases":["UBUNTU-CVE-2026-69220","DEBIAN-CVE-2026-69220","CGA-2w25-6wx6-w4f9","CGA-5cx2-jhjf-gm6f","CGA-6qj9-vcqf-v9m8","CGA-74m4-7f6g-9cpc","CGA-796v-fxjp-vx8g","CGA-87p3-9942-rhmf","CGA-cf7w-x9jh-hr56","CGA-f6gg-rjxr-h373","CGA-fr9r-mhvg-g3q6","CGA-fxrm-9w58-4g5j","CGA-g6rc-hpc9-gqpp","CGA-gq57-f7wr-8p33","CGA-h29f-p978-493c","CGA-v9v4-c57q-ww25","CGA-vg86-x982-9vxx","CGA-vjf6-2948-v4w2","CGA-vmpf-cm3p-w9h8","CGA-x256-xppp-qgmr","CGA-xjc2-xgx8-qw4x","CGA-2frm-hm4r-x6jr","CGA-3c8p-mq4v-4qg4","CGA-45wj-v28g-v4mc","CGA-57pc-v36f-9cg5","CGA-7p3c-669x-7grq","CGA-89rx-hwv5-gvvj","CGA-8v4r-7x7p-xhwh","CGA-968c-5xm6-wrp4","CGA-cgpc-vrw3-h87j","CGA-cx7q-mjh4-9pvp","CGA-fw5f-cf74-cw2p","CGA-g6vx-rv66-pmp9","CGA-h3hw-hq3m-5cqh","CGA-h7c6-5g2x-wpfh","CGA-hh7c-jp5w-725h","CGA-hrrf-x2wm-hjjh","CGA-j9gj-x7cw-8jgf","CGA-jwp2-p832-qgjf","CGA-mv4v-84rr-3g92","CGA-p8q9-28cj-6xcw","GHSA-93j5-89vc-pph4","CGA-qjh7-v9fx-hmw8","CGA-qx99-pxxh-34mh","CGA-r6x9-w5hj-rqjj","CGA-v32h-q989-v8vw","CGA-v4wr-269h-9px3","CGA-vhjr-5wm8-fqqp","CGA-vj2v-g7q8-82m7","CGA-w247-c8m8-8q26","CGA-w3w3-q46f-4mcv","CGA-wfqh-mcr7-x9g4","CGA-wwfx-53cg-7qjv","CGA-x7c9-5pv5-x33w","CGA-xfhh-6pxp-mfxx","CGA-xg4q-m9wg-4v2j"],"status":"published","duplicateOf":null,"title":null,"description":"The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.1, src/main/java/com/rabbitmq/client/impl/ValueReader.java permits ValueReader.readTable and ValueReader.readArray to call ValueReader.readFieldValue recursively for AMQP table type F and AMQP array type A values without a nesting-depth limit. A malicious AMQP server or network intermediary can send approximately 580 nested table levels in the pre-authentication connection.start frame, fitting within the default 131072-byte frame maximum, to trigger StackOverflowError. The error terminates the client input processing thread and causes denial of service. This issue is fixed in version 5.33.1.","dates":{"published":"2026-08-18T16:25:16.178Z","modified":"2026-08-18T17:45:59.023Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.7,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.7,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00725,"percentile":0.53238,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.32600000000000007,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00399},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00725,"percentile":0.53238}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00399,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00725,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00725,"percentile":0.53238}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-674","name":"Uncontrolled Recursion","description":"The product does not properly control the amount of recursion that takes place,  consuming excessive resources, such as allocated memory or the program stack.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/674.html"}],"affected":[{"vendor":"chainguard","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.32.1-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.32.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.32.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r56 | < 37.0.0-r54","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19","name":"logstash-8.19","label":"logstash-8.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19","purlType":"apk","versions":[{"text":"< 8.19.20-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-iamguarded-compat","name":"logstash-8.19-iamguarded-compat","label":"logstash-8.19-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-iamguarded-compat","purlType":"apk","versions":[{"text":"< 8.19.20-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-8.19-with-output-opensearch","name":"logstash-8.19-with-output-opensearch","label":"logstash-8.19-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-8.19-with-output-opensearch","purlType":"apk","versions":[{"text":"< 8.19.20-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.19.20-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2","name":"logstash-9.2","label":"logstash-9.2","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-iamguarded-compat","name":"logstash-9.2-iamguarded-compat","label":"logstash-9.2-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.2-with-output-opensearch","name":"logstash-9.2-with-output-opensearch","label":"logstash-9.2-with-output-opensearch","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.2-with-output-opensearch","purlType":"apk","versions":[{"text":"< 9.2.8-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.2.8-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5","name":"logstash-9.5","label":"logstash-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-9.5-iamguarded-compat","name":"logstash-9.5-iamguarded-compat","label":"logstash-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4","name":"logstash-fips-9.4","label":"logstash-fips-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.4-iamguarded-compat","name":"logstash-fips-9.4-iamguarded-compat","label":"logstash-fips-9.4-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5","name":"logstash-fips-9.5","label":"logstash-fips-9.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"logstash-fips-9.5-iamguarded-compat","name":"logstash-fips-9.5-iamguarded-compat","label":"logstash-fips-9.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/logstash-fips-9.5-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.5.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.5.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"< 2023.45-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2023.45-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"< 6.14.5-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"< 6.14.5-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cassandra-reaper","name":"cassandra-reaper","label":"cassandra-reaper","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cassandra-reaper","purlType":"apk","versions":[{"text":"< 5.0.0-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.0.0-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r54","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r56 | < 37.0.0-r54","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3","name":"logstash-9.3","label":"logstash-9.3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.3-iamguarded-compat","name":"logstash-9.3-iamguarded-compat","label":"logstash-9.3-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.3-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4","name":"logstash-9.4","label":"logstash-9.4","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"logstash-9.4-iamguarded-compat","name":"logstash-9.4-iamguarded-compat","label":"logstash-9.4-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/logstash-9.4-iamguarded-compat","purlType":"apk","versions":[{"text":"< 9.4.5-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.5-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-mqtt-transport","name":"thingsboard-tb-mqtt-transport","label":"thingsboard-tb-mqtt-transport","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-mqtt-transport","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r23","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zipkin","name":"zipkin","label":"zipkin","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zipkin","purlType":"apk","versions":[{"text":"< 3.6.1-r22","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.1-r22","eol":null,"hubHref":null},{"vendor":"debian","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/rabbitmq-java-client","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"com.rabbitmq","product":"amqp-client","name":"com.rabbitmq:amqp-client","label":"amqp-client","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/com.rabbitmq/amqp-client","purlType":"maven","versions":[{"text":"< 5.33.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.1","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"rabbitmq-java-client","name":"rabbitmq-java-client","label":"rabbitmq-java-client","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.33.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.33.1","eol":null,"hubHref":"/vendor/rabbitmq/rabbitmq-java-client"}],"affectedCount":39,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-93j5-89vc-pph4","label":"github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-93j5-89vc-pph4","hostname":"github.com","tags":["X Refsource CONFIRM","Advisory","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2007","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2007","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/pull/2008","label":"github.com/rabbitmq/rabbitmq-java-client/pull/2008","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/09af76fce136f3136931654a0a1d43095c80e2f0","label":"github.com/rabbitmq/rabbitmq-java-client/commit/09af76fce136f3136931654a0a1d43095c80e2f0","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/commit/db89e34809fbc6ba4e946615f297f3684ccd0acc","label":"github.com/rabbitmq/rabbitmq-java-client/commit/db89e34809fbc6ba4e946615f297f3684ccd0acc","hostname":"github.com","tags":["X Refsource MISC","FIX","WEB"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.1","label":"github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.1","hostname":"github.com","tags":["X Refsource MISC","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-69220","label":"ubuntu.com/security/CVE-2026-69220","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69220","label":"www.cve.org/CVERecord?id=CVE-2026-69220","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-69220","label":"security-tracker.debian.org/tracker/CVE-2026-69220","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69220.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69220.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69220","label":"nvd.nist.gov/vuln/detail/CVE-2026-69220","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/rabbitmq-java-client","label":"github.com/rabbitmq/rabbitmq-java-client","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-9P36-6G9X-94JQ"]},"timeline":[{"kind":"published","date":"2026-08-18T16:25:16.178Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-18T17:45:59.023Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T06:24:14.895Z","stale":false,"partial":false}}