Vmware Rabbitmq Java Client vulnerabilities

CVE-2026-106121 [HIGH] CWE-835 CVE-2026-106121: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners do not stop at CharacterIterator.DONE. The default De

CVE-2026-106122 [HIGH] CWE-172 CVE-2026-106122: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by ValueWriter.writeShortstr. An attacker who can submit an RPC message

CVE-2023-46120 [HIGH] CWE-400 CVE-2023-46120: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. `maxBodyLebgth` was not used when receiving Message objects. Attackers could send a very large Message causing a memory overflow and triggering an OOM Error. Users of RabbitMQ may suffer from DoS attacks from RabbitMQ Java client whi

CVE-2018-11087 [MEDIUM] CWE-295 CVE-2018-11087: Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-t Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname validation. A malicious user that has the ability to intercept traffic would be able to view data in transit.

CVE-2026-106123 [MEDIUM] CWE-209 CVE-2026-106123: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact w The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext username and password, startup logs, application performa