All products

Red Hat OpenStack Platform 18.0/rabbitmq-server

Red Hat · Package
37 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP APICVE-2023-46118 · GHSA-W6CQ-9CF4-GQPG rabbit_commonRed Hat OpenStack Platform 16.1/rabbitmq-server HexRed Hat Medium Fix reported
rabbitmq: RabbitMQ has XSS Vulnerability in an Error Message in Management UICVE-2025-30219 Red Hat OpenStack Platform 16.2/rabbitmq-serverRed Hat OpenStack Platform 17.1/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP requestCVE-2025-50200 Red Hat OpenStack Platform 16.2/rabbitmq-serverRed Hat OpenStack Platform 17.1/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Unsanitized vhost names allow for XSS in management UICVE-2026-44839 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 16.2/rabbitmq-server Red Hat Low No fix reported
cowlib: cowlib: Link header smuggling allows out-of-band connections to attacker-controlled originsCVE-2026-43971 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 17.1/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Denial of Service due to atom-table exhaustion via reply-to queue name decodingCVE-2026-67238 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Monitoring user can reset authentication attempt countersCVE-2026-66069 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Denial of Service via atom table exhaustion in stream chunk_selectorCVE-2026-66072 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Denial of Service via unbounded super-stream partition allocationCVE-2026-66080 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Denial of Service via AMQP 0-9-1 body size validation bypassCVE-2026-67235 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Monitoring user can disrupt message flow via authorization flawCVE-2026-66075 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 18.0/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Denial of Service via resource exhaustion in authentication mechanism handlingCVE-2026-67222 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Denial of Service via unbounded pre-authentication state accumulation in Web STOMPCVE-2026-67230 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Denial of Service via oversized stream protocol frameCVE-2026-67225 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Authentication preference persistence via invalid cookie nameCVE-2026-67234 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Low No fix reported
rabbitmq-server: rabbitmq-server: Cross-site scripting via unescaped OAuth token injectionCVE-2026-67237 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Denial of Service via management API atom table exhaustionCVE-2026-66073 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: RabbitMQ: Protected account deletion safeguard bypass via bulk-delete APICVE-2026-66078 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Low No fix reported
rabbitmq-server: rabbitmq-server: Denial of service via atom exhaustion in OAuth2 JWT scope parsingCVE-2026-66071 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported
rabbitmq-server: rabbitmq-server: Stored Cross-Site Scripting via TLS peer certificate in stream-management UICVE-2026-67239 Red Hat Hardened Images/rabbitmq-server4.2Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server Red Hat Medium No fix reported