Go/github.com/rabbitmq/amqp091-go CVE-2026-79921: high, EPSS 0.55%

amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

Action: Upgrade github.com/rabbitmq/amqp091-go to 1.13.0 or later.

go get github.com/rabbitmq/amqp091-go@v1.13.0

Affected

Fixed versions

Sources

• osv: GHSA-6c5v-hqjr-5xxp
• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-6c5v-hqjr-5xxp
• https://nvd.nist.gov/vuln/detail/CVE-2026-79921
• https://github.com/rabbitmq/amqp091-go/pull/353
• https://github.com/rabbitmq/amqp091-go/commit/6beb7b51f59e46ddcf8066ad498dad32491d3be0
• https://github.com/rabbitmq/amqp091-go
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.13.0

CVE-2026-79921 · published 2026-09-03T20:15:13Z · modified 2026-09-15T19:10:48.577197078Z · JSON