Com.Rabbitmq Amqp-Client vulnerabilities

CVE-2026-106121 [HIGH] CWE-835 CVE-2026-106121: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners do not stop at CharacterIterator.DONE. The default De

CVE-2026-106122 [HIGH] CWE-172 CVE-2026-106122: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by ValueWriter.writeShortstr. An attacker who can submit an RPC message

CVE-2026-106123 [MEDIUM] CWE-209 CVE-2026-106123: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext username and password, startup logs, application performa