CVE-2026-63335

Maven/com.rabbitmq:amqp-client CVE-2026-63335: medium

RabbitMQ Java client malformed body frame triggers raw command assembler exception

Action: Upgrade com.rabbitmq:amqp-client to 5.31.0 or later.

Affected

Fixed versions

Sources

• osv: GHSA-qx7j-jv8m-fppr
• https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr
• https://github.com/rabbitmq/rabbitmq-java-client/pull/1959
• https://github.com/rabbitmq/rabbitmq-java-client/pull/1960
• https://github.com/rabbitmq/rabbitmq-java-client/commit/31735344d9f9dfc53740b67f06e560e8846b9322
• https://github.com/rabbitmq/rabbitmq-java-client/commit/abd6d60d4e2bfc1a327dc90ab246b2e8aca1f33b
• https://github.com/rabbitmq/rabbitmq-java-client
• https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.31.0

CVE-2026-63335 · published 2026-08-18T16:32:42Z · modified 2026-09-10T03:50:54.002021426Z · JSON