{"action":"Upgrade com.rabbitmq:amqp-client to 5.36.0 or later.","affected":[{"fixed":"5.36.0","introduced":"0"}],"component":"com.rabbitmq:amqp-client","cve_ids":["CVE-2026-106122"],"ecosystem":"Maven","epss":0.00491,"exploited":false,"fixed_versions":["5.36.0"],"ghsa_id":"GHSA-7822-rcf6-97fx","id":"tcs_01M5N8HV9RQ0FJAS2VQTFD7CV0","modified_at":"2026-10-07T20:30:07.156315722Z","published_at":"2026-10-07T20:25:29Z","references":["https://osv.dev/vulnerability/GHSA-7822-rcf6-97fx","https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-7822-rcf6-97fx","https://nvd.nist.gov/vuln/detail/CVE-2026-106122","https://github.com/rabbitmq/rabbitmq-java-client/pull/2065","https://github.com/rabbitmq/rabbitmq-java-client/commit/b8bd750fa8c90690e859b18d6343b34421309020","https://github.com/rabbitmq/rabbitmq-java-client","https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.36.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-7822-rcf6-97fx","url":"https://osv.dev/vulnerability/GHSA-7822-rcf6-97fx"},{"source":"nvd","source_id":"CVE-2026-106122","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106122"}],"summary":"RabbitMQ: Malformed UTF-8 in shortstr properties permanently disables RPC consumers"}