{"schemaVersion":3,"id":"CVE-2026-79921","aliases":["RHSA-2026:60854","UBUNTU-CVE-2026-79921","DEBIAN-CVE-2026-79921","CGA-2jxm-6mmr-gghq","CGA-2m39-cvcq-c4mw","CGA-2wv5-74c6-hqqc","CGA-3f3x-qg9r-3m9j","CGA-3fq4-rj83-qvfh","CGA-5hj4-mmww-8h46","CGA-5m5m-vh7g-gjvc","CGA-627w-x25w-v9w9","CGA-7pm2-23vq-2jjv","CGA-7r35-4j25-8gpm","CGA-84pv-rph4-7h4h","CGA-8975-6v4r-crc5","CGA-8p64-p59f-fwx6","CGA-95f5-86gw-pq6c","CGA-cpp9-rwg4-rmx7","CGA-cvg6-c5c7-v63p","CGA-g28f-m4v5-9q9x","CGA-gf4p-22xr-3qj3","CGA-gfgx-6j52-cghf","CGA-gg5v-m3wf-9x6w","CGA-gwcw-746r-vpmj","CGA-hmg7-hh9x-v7c7","CGA-hr32-q6vp-87gv","CGA-j6ch-64h3-wqxf","CGA-p5rj-8vf6-8qp8","CGA-pcx4-9h49-m3f9","CGA-pqg6-r3q9-25h9","CGA-q6wf-599j-cm46","CGA-r39c-xmc5-8wq8","CGA-rh5f-28cx-56g9","CGA-rhh7-9xgr-cg9v","CGA-rphh-c4gw-p24c","CGA-w6rr-wcc6-pmx3","GHSA-6c5v-hqjr-5xxp","GO-2026-6372","CGA-2676-m5j7-xhg4","CGA-26rh-2r79-5vg9","CGA-37j9-76vv-qhg4","CGA-3w3h-p8wj-jm4r","CGA-4428-pgpj-7mm3","CGA-46m6-r2cg-8gg5","CGA-4hh5-pgm5-mm95","CGA-57cx-q8jm-p5p3","CGA-59qq-xf36-7v7g","CGA-5hfr-p96p-92wp","CGA-6v2p-3p59-pc2v","CGA-6w77-xmgx-7m87","CGA-7cj2-mh5x-j562","CGA-7gq5-cm4m-p3xx","CGA-7x45-7j6p-9c97","CGA-88r3-5qcp-26hm","CGA-89qv-xhq4-2pgv","CGA-9fw7-f77r-4qv5","CGA-9vpf-m7jr-5fpq","CGA-cxrh-jhfj-fj2w","CGA-fqvv-g9jp-g8jc","CGA-gv6j-p968-9h6v","CGA-h2r9-9x6p-xj4p","CGA-hqqv-9rg6-3q75","CGA-hwfj-8f89-634x","CGA-j29x-f23p-hjc3","CGA-j8mc-qgcg-9rmx","CGA-m6hq-q2xg-xvfj","CGA-mmvm-wff6-pj95","CGA-ppgh-p5jx-ww5r","CGA-q33j-qq7q-4x55","CGA-r4h7-rq6p-rw57","CGA-r5jq-h882-cxf6","CGA-r999-7wq5-7cj4","CGA-rg2q-2jf2-394g","CGA-rr3r-2hv9-63ww","CGA-rxhj-qjc7-7mwq","CGA-v8wq-24cf-qc3c","CGA-v97v-6h2m-9434","CGA-vf3r-fwq2-29rw","CGA-vhm6-fjjv-xc33","CGA-wjq2-mpmp-7p9f","CGA-x8qx-67x8-94r8","CGA-xq32-w88c-3jx9"],"status":"published","duplicateOf":null,"title":null,"description":"amqp091-go is a Go AMQP 0.9.1 client. Before version 1.13.0, a compromised or malicious AMQP broker can force the client to allocate resources for and process content body frames that exceed the negotiated frame_max limit. This can lead to unexpected memory consumption or application-layer denial of service (DoS), bypassing the protocol's built-in framing constraints. Version 1.13.0 contains a fix. No known workarounds are available.","dates":{"published":"2026-08-26T20:24:58.115Z","modified":"2026-08-29T02:50:25.822Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.9,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Red hat","score":7.5,"severity":"high","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","exploitability":10,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Go","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.9,"severity":"high","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0055,"percentile":0.44874,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.23399999999999996,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00316},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0055,"percentile":0.44874}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00316,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0055,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0055,"percentile":0.44874}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-770","name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/770.html"}],"affected":[{"vendor":"chainguard","product":"argo-events","name":"argo-events","label":"argo-events","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-events","purlType":"apk","versions":[{"text":"< 1.9.11-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.11-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"argo-events-fips","name":"argo-events-fips","label":"argo-events-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/argo-events-fips","purlType":"apk","versions":[{"text":"< 1.9.11-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.11-r9","eol":null,"hubHref":null},{"vendor":"chainguard","product":"bento","name":"bento","label":"bento","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/bento","purlType":"apk","versions":[{"text":"< 1.21.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.1-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"bento-fips","name":"bento-fips","label":"bento-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/bento-fips","purlType":"apk","versions":[{"text":"< 1.21.1-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.1-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-1.15","name":"dapr-daprd-1.15","label":"dapr-daprd-1.15","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-1.15","purlType":"apk","versions":[{"text":"< 1.15.14-r15","noFixRecorded":false,"fixedIn":null},{"text":"< 1.15.14-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.14-r15 | < 1.15.14-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-1.16","name":"dapr-daprd-1.16","label":"dapr-daprd-1.16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-1.16","purlType":"apk","versions":[{"text":"< 1.16.19-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.19-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-1.17","name":"dapr-daprd-1.17","label":"dapr-daprd-1.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-1.17","purlType":"apk","versions":[{"text":"< 1.17.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-1.18","name":"dapr-daprd-1.18","label":"dapr-daprd-1.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-1.18","purlType":"apk","versions":[{"text":"< 1.18.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.3-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-fips-1.15","name":"dapr-daprd-fips-1.15","label":"dapr-daprd-fips-1.15","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-fips-1.15","purlType":"apk","versions":[{"text":"< 1.15.14-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15.14-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-fips-1.16","name":"dapr-daprd-fips-1.16","label":"dapr-daprd-fips-1.16","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-fips-1.16","purlType":"apk","versions":[{"text":"< 1.16.19-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.19-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-fips-1.17","name":"dapr-daprd-fips-1.17","label":"dapr-daprd-fips-1.17","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-fips-1.17","purlType":"apk","versions":[{"text":"< 1.17.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.13-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dapr-daprd-fips-1.18","name":"dapr-daprd-fips-1.18","label":"dapr-daprd-fips-1.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dapr-daprd-fips-1.18","purlType":"apk","versions":[{"text":"< 1.18.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.18.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"falcosidekick","name":"falcosidekick","label":"falcosidekick","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/falcosidekick","purlType":"apk","versions":[{"text":"< 2.35.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"falcosidekick-fips","name":"falcosidekick-fips","label":"falcosidekick-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/falcosidekick-fips","purlType":"apk","versions":[{"text":"< 2.35.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"guac","name":"guac","label":"guac","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/guac","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"guacingest","name":"guacingest","label":"guacingest","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/guacingest","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"guacone","name":"guacone","label":"guacone","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/guacone","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-2.18","name":"keda-2.18","label":"keda-2.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-2.18","purlType":"apk","versions":[{"text":"< 2.18.3-r17","noFixRecorded":false,"fixedIn":null},{"text":"< 2.18.3-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.3-r17 | < 2.18.3-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-2.18-metrics-apiserver","name":"keda-2.18-metrics-apiserver","label":"keda-2.18-metrics-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-2.18-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.18.3-r17","noFixRecorded":false,"fixedIn":null},{"text":"< 2.18.3-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.3-r17 | < 2.18.3-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-2.19-metrics-apiserver","name":"keda-2.19-metrics-apiserver","label":"keda-2.19-metrics-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-2.19-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.19.0-r30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r30","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-2.20","name":"keda-2.20","label":"keda-2.20","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-2.20","purlType":"apk","versions":[{"text":"< 2.20.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-2.20-metrics-apiserver","name":"keda-2.20-metrics-apiserver","label":"keda-2.20-metrics-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-2.20-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.20.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-fips-2.18","name":"keda-fips-2.18","label":"keda-fips-2.18","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-fips-2.18","purlType":"apk","versions":[{"text":"< 2.18.3-r20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.18.3-r20","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-fips-2.19","name":"keda-fips-2.19","label":"keda-fips-2.19","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-fips-2.19","purlType":"apk","versions":[{"text":"< 2.19.0-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r21","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-fips-2.19-metrics-apiserver","name":"keda-fips-2.19-metrics-apiserver","label":"keda-fips-2.19-metrics-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-fips-2.19-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.19.0-r21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r21","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-fips-2.20","name":"keda-fips-2.20","label":"keda-fips-2.20","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-fips-2.20","purlType":"apk","versions":[{"text":"< 2.20.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keda-fips-2.20-metrics-apiserver","name":"keda-fips-2.20-metrics-apiserver","label":"keda-fips-2.20-metrics-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keda-fips-2.20-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.20.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"minio","name":"minio","label":"minio","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/minio","purlType":"apk","versions":[{"text":"< 0.20260717.120751-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20260717.120751-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"minio-fips","name":"minio-fips","label":"minio-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/minio-fips","purlType":"apk","versions":[{"text":"< 0.20260717.120751-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20260717.120751-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuclio-controller","name":"nuclio-controller","label":"nuclio-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuclio-controller","purlType":"apk","versions":[{"text":"< 1.17.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.6-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuclio-controller-fips","name":"nuclio-controller-fips","label":"nuclio-controller-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuclio-controller-fips","purlType":"apk","versions":[{"text":"< 1.17.6-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.6-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentelemetry-collector-contrib","name":"opentelemetry-collector-contrib","label":"opentelemetry-collector-contrib","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentelemetry-collector-contrib","purlType":"apk","versions":[{"text":"< 0.160.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.160.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opentelemetry-collector-contrib-fips","name":"opentelemetry-collector-contrib-fips","label":"opentelemetry-collector-contrib-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opentelemetry-collector-contrib-fips","purlType":"apk","versions":[{"text":"< 0.160.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.160.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sftpgo-plugin-pubsub","name":"sftpgo-plugin-pubsub","label":"sftpgo-plugin-pubsub","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sftpgo-plugin-pubsub","purlType":"apk","versions":[{"text":"< 1.0.18-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.18-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.36","name":"telegraf-1.36","label":"telegraf-1.36","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.36","purlType":"apk","versions":[{"text":"< 1.36.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.4-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.37","name":"telegraf-1.37","label":"telegraf-1.37","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.37","purlType":"apk","versions":[{"text":"< 1.37.3-r30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.37.3-r30","eol":null,"hubHref":null},{"vendor":"chainguard","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/telegraf-1.38","purlType":"apk","versions":[{"text":"< 1.38.4-r27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.38.4-r27","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trufflehog","name":"trufflehog","label":"trufflehog","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trufflehog","purlType":"apk","versions":[{"text":"< 3.97.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.97.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"trufflehog-fips","name":"trufflehog-fips","label":"trufflehog-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/trufflehog-fips","purlType":"apk","versions":[{"text":"< 3.97.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.97.4-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"versitygw","name":"versitygw","label":"versitygw","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/versitygw","purlType":"apk","versions":[{"text":"< 1.7.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"versitygw-fips","name":"versitygw-fips","label":"versitygw-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/versitygw-fips","purlType":"apk","versions":[{"text":"< 1.8.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.8.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"argo-events","name":"argo-events","label":"argo-events","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/argo-events","purlType":"apk","versions":[{"text":"< 1.9.11-r9","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.9.11-r9","eol":null,"hubHref":null},{"vendor":"wolfi","product":"bento","name":"bento","label":"bento","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/bento","purlType":"apk","versions":[{"text":"< 1.21.1-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21.1-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dapr-daprd-1.16","name":"dapr-daprd-1.16","label":"dapr-daprd-1.16","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dapr-daprd-1.16","purlType":"apk","versions":[{"text":"< 1.16.19-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.16.19-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dapr-daprd-1.17","name":"dapr-daprd-1.17","label":"dapr-daprd-1.17","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dapr-daprd-1.17","purlType":"apk","versions":[{"text":"< 1.17.13-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.17.13-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"falcosidekick","name":"falcosidekick","label":"falcosidekick","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/falcosidekick","purlType":"apk","versions":[{"text":"< 2.35.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.35.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"guac","name":"guac","label":"guac","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/guac","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"guacingest","name":"guacingest","label":"guacingest","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/guacingest","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"guacone","name":"guacone","label":"guacone","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/guacone","purlType":"apk","versions":[{"text":"< 1.1.0-r33","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.0-r33","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keda-2.19-metrics-apiserver","name":"keda-2.19-metrics-apiserver","label":"keda-2.19-metrics-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keda-2.19-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.19.0-r30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r30","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keda-2.20","name":"keda-2.20","label":"keda-2.20","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keda-2.20","purlType":"apk","versions":[{"text":"< 2.20.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keda-2.20-metrics-apiserver","name":"keda-2.20-metrics-apiserver","label":"keda-2.20-metrics-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keda-2.20-metrics-apiserver","purlType":"apk","versions":[{"text":"< 2.20.2-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.20.2-r7","eol":null,"hubHref":null},{"vendor":"wolfi","product":"minio","name":"minio","label":"minio","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/minio","purlType":"apk","versions":[{"text":"< 0.20260717.120751-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.20260717.120751-r14","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opentelemetry-collector-contrib","name":"opentelemetry-collector-contrib","label":"opentelemetry-collector-contrib","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opentelemetry-collector-contrib","purlType":"apk","versions":[{"text":"< 0.160.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.160.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sftpgo-plugin-pubsub","name":"sftpgo-plugin-pubsub","label":"sftpgo-plugin-pubsub","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sftpgo-plugin-pubsub","purlType":"apk","versions":[{"text":"< 1.0.18-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.18-r8","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.36","name":"telegraf-1.36","label":"telegraf-1.36","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.36","purlType":"apk","versions":[{"text":"< 1.36.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.36.4-r19","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.37","name":"telegraf-1.37","label":"telegraf-1.37","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.37","purlType":"apk","versions":[{"text":"< 1.37.3-r30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.37.3-r30","eol":null,"hubHref":null},{"vendor":"wolfi","product":"telegraf-1.38","name":"telegraf-1.38","label":"telegraf-1.38","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/telegraf-1.38","purlType":"apk","versions":[{"text":"< 1.38.4-r27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.38.4-r27","eol":null,"hubHref":null},{"vendor":"wolfi","product":"trufflehog","name":"trufflehog","label":"trufflehog","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/trufflehog","purlType":"apk","versions":[{"text":"< 3.97.4-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.97.4-r1","eol":null,"hubHref":null},{"vendor":"debian","product":"golang-github-rabbitmq-amqp091-go","name":"golang-github-rabbitmq-amqp091-go","label":"golang-github-rabbitmq-amqp091-go","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/golang-github-rabbitmq-amqp091-go","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 1.14.0-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 1.14.0-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"golang-github-rabbitmq-amqp091-go","name":"golang-github-rabbitmq-amqp091-go","label":"golang-github-rabbitmq-amqp091-go","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/golang-github-rabbitmq-amqp091-go","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"github.com/rabbitmq","product":"amqp091-go","name":"github.com/rabbitmq/amqp091-go","label":"amqp091-go","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/rabbitmq/amqp091-go","purlType":"golang","versions":[{"text":"< 1.13.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.0","eol":null,"hubHref":null},{"vendor":"rabbitmq","product":"amqp091-go","name":"amqp091-go","label":"amqp091-go","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.13.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13.0","eol":null,"hubHref":"/vendor/rabbitmq/amqp091-go"},{"vendor":"redhat","product":"opentelemetry-collector-contrib","name":"opentelemetry-collector-contrib","label":"opentelemetry-collector-contrib","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/opentelemetry-collector-contrib","purlType":"rpm","versions":[{"text":"< 0:0.159.0-0.1.1.hum1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:0.159.0-0.1.1.hum1","eol":null,"hubHref":null}],"affectedCount":64,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp","label":"github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp","hostname":"github.com","tags":["X Refsource CONFIRM","ARTICLE","REPORT","Advisory","WEB"]},{"url":"https://github.com/rabbitmq/amqp091-go/pull/353","label":"github.com/rabbitmq/amqp091-go/pull/353","hostname":"github.com","tags":["X Refsource MISC","ARTICLE","REPORT","FIX","WEB"]},{"url":"https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0","label":"github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0","hostname":"github.com","tags":["X Refsource MISC","ARTICLE","FIX","WEB"]},{"url":"https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0","label":"github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0","hostname":"github.com","tags":["X Refsource MISC","ARTICLE","WEB"]},{"url":"https://access.redhat.com/errata/RHSA-2026:60854","label":"access.redhat.com/errata/RHSA-2026:60854","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-79921","label":"access.redhat.com/security/cve/CVE-2026-79921","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://access.redhat.com/security/updates/classification/","label":"access.redhat.com/security/updates/classification/","hostname":"access.redhat.com","tags":["ARTICLE"]},{"url":"https://images.redhat.com/","label":"images.redhat.com","hostname":"images.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60854.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_60854.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524713","label":"bugzilla.redhat.com/show_bug.cgi?id=2524713","hostname":"bugzilla.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-79921","label":"www.cve.org/CVERecord?id=CVE-2026-79921","hostname":"www.cve.org","tags":["Advisory","REPORT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-79921","label":"nvd.nist.gov/vuln/detail/CVE-2026-79921","hostname":"nvd.nist.gov","tags":["Advisory","Oval"]},{"url":"https://ubuntu.com/security/CVE-2026-79921","label":"ubuntu.com/security/CVE-2026-79921","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-79921","label":"security-tracker.debian.org/tracker/CVE-2026-79921","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79921.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79921.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://github.com/rabbitmq/amqp091-go","label":"github.com/rabbitmq/amqp091-go","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2026:21897-1","RHSA-2026:80217","SUSE-SU-2026:23855-1","SUSE-SU-2026:23863-1"],"duplicates":[],"related":["CGA-VJXV-MX2C-9VM3","OPENSUSE-SU-2026:21897-1","SUSE-SU-2026:23855-1","SUSE-SU-2026:23863-1"]},"timeline":[{"kind":"published","date":"2026-08-26T20:24:58.115Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-29T02:50:25.822Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":36,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T23:29:42.962Z","stale":false,"partial":false}}