{"action":"Upgrade com.rabbitmq:amqp-client to 5.31.0 or later.","affected":[{"fixed":"5.31.0","introduced":"0"}],"component":"com.rabbitmq:amqp-client","cve_ids":["CVE-2026-63335"],"ecosystem":"Maven","epss":0.00515,"exploited":false,"fixed_versions":["5.31.0"],"ghsa_id":"GHSA-qx7j-jv8m-fppr","id":"tcs_01M5N9AG2KRDB63Z2Y02GVN0EM","modified_at":"2026-09-10T03:50:54.002021426Z","published_at":"2026-08-18T16:32:42Z","references":["https://osv.dev/vulnerability/GHSA-qx7j-jv8m-fppr","https://github.com/rabbitmq/rabbitmq-java-client/security/advisories/GHSA-qx7j-jv8m-fppr","https://github.com/rabbitmq/rabbitmq-java-client/pull/1959","https://github.com/rabbitmq/rabbitmq-java-client/pull/1960","https://github.com/rabbitmq/rabbitmq-java-client/commit/31735344d9f9dfc53740b67f06e560e8846b9322","https://github.com/rabbitmq/rabbitmq-java-client/commit/abd6d60d4e2bfc1a327dc90ab246b2e8aca1f33b","https://github.com/rabbitmq/rabbitmq-java-client","https://github.com/rabbitmq/rabbitmq-java-client/releases/tag/v5.31.0"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-qx7j-jv8m-fppr","url":"https://osv.dev/vulnerability/GHSA-qx7j-jv8m-fppr"}],"summary":"RabbitMQ Java client malformed body frame triggers raw command assembler exception"}