Go/github.com/rabbitmq/amqp091-go CVE-2026-107386: medium 6.3
Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go
Action: Upgrade github.com/rabbitmq/amqp091-go to 1.14.0 or later.
go get github.com/rabbitmq/amqp091-go@v1.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.0 | - |
Fixed versions
| 1.14.0 |
Sources
- osv: GO-2026-6700
- nvd: CVE-2026-107386
- https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8
- https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
- https://github.com/rabbitmq/amqp091-go/pull/377
- https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0
CVE-2026-107386 · published · modified · JSON