CVE-2026-69220
1 advisory.
Maven/com.rabbitmq:amqp-client CVE-2026-69220: high
RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS
Action: Upgrade com.rabbitmq:amqp-client to 5.33.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.33.1 | - |
Fixed versions
| 5.33.1 |
Sources
- osv: GHSA-93j5-89vc-pph4
- https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-93j5-89vc-pph4
- https://github.com/rabbitmq/rabbitmq-java-client/pull/2007
- https://github.com/rabbitmq/rabbitmq-java-client/pull/2008
- https://github.com/rabbitmq/rabbitmq-java-client/commit/09af76fce136f3136931654a0a1d43095c80e2f0
- https://github.com/rabbitmq/rabbitmq-java-client/commit/db89e34809fbc6ba4e946615f297f3684ccd0acc
- https://github.com/rabbitmq/rabbitmq-java-client
- https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.33.1
CVE-2026-69220 · published · modified · JSON