{"action":"Upgrade com.rabbitmq:amqp-client to 5.34.0 or later.","affected":[{"fixed":"5.34.0","introduced":"0"}],"component":"com.rabbitmq:amqp-client","cve_ids":["CVE-2026-75516"],"ecosystem":"Maven","epss":0.00552,"exploited":false,"fixed_versions":["5.34.0"],"ghsa_id":"GHSA-jh4v-gfqj-7rhx","id":"tcs_01M5N92Z9PYDJMVX4AW0GX9BT6","modified_at":"2026-09-17T15:00:06.805894716Z","published_at":"2026-09-17T14:52:21Z","references":["https://osv.dev/vulnerability/GHSA-jh4v-gfqj-7rhx","https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-jh4v-gfqj-7rhx","https://nvd.nist.gov/vuln/detail/CVE-2026-75516","https://github.com/rabbitmq/rabbitmq-java-client/pull/2015","https://github.com/rabbitmq/rabbitmq-java-client/pull/2016","https://github.com/rabbitmq/rabbitmq-java-client/commit/6d7c2bfe89796ca34d3531098fb59dd657fea39e","https://github.com/rabbitmq/rabbitmq-java-client/commit/e7f10bf99aee103dd9f64b3e52a725fc9f9d3763","https://github.com/rabbitmq/rabbitmq-java-client","https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.34.0"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-jh4v-gfqj-7rhx","url":"https://osv.dev/vulnerability/GHSA-jh4v-gfqj-7rhx"},{"source":"nvd","source_id":"CVE-2026-75516","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-75516"}],"summary":"RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement"}