Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
· Package
37 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
RabbitMQ vulnerable to Denial of Service by publishing large messages over the HTTP API
CVE-2023-46118 · GHSA-W6CQ-9CF4-GQPG
rabbit_common
Red Hat OpenStack Platform 16.1/rabbitmq-server
Hex
Red Hat
Medium
Fix reported
2026-06-30
rabbitmq: RabbitMQ has XSS Vulnerability in an Error Message in Management UI
CVE-2025-30219
Red Hat OpenStack Platform 16.2/rabbitmq-server
Red Hat OpenStack Platform 17.1/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ Node can log Basic Auth header from an HTTP request
CVE-2025-50200
Red Hat OpenStack Platform 16.2/rabbitmq-server
Red Hat OpenStack Platform 17.1/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Unsanitized vhost names allow for XSS in management UI
CVE-2026-44839
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 16.2/rabbitmq-server
Red Hat
Low
No fix reported
Not recorded
cowlib: cowlib: Link header smuggling allows out-of-band connections to attacker-controlled origins
CVE-2026-43971
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 17.1/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Denial of Service due to atom-table exhaustion via reply-to queue name decoding
CVE-2026-67238
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Monitoring user can reset authentication attempt counters
CVE-2026-66069
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Denial of Service via atom table exhaustion in stream chunk_selector
CVE-2026-66072
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Denial of Service via unbounded super-stream partition allocation
CVE-2026-66080
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Denial of Service via AMQP 0-9-1 body size validation bypass
CVE-2026-67235
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Monitoring user can disrupt message flow via authorization flaw
CVE-2026-66075
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 18.0/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Denial of Service via resource exhaustion in authentication mechanism handling
CVE-2026-67222
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Denial of Service via unbounded pre-authentication state accumulation in Web STOMP
CVE-2026-67230
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Denial of Service via oversized stream protocol frame
CVE-2026-67225
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Authentication preference persistence via invalid cookie name
CVE-2026-67234
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Low
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Cross-site scripting via unescaped OAuth token injection
CVE-2026-67237
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Denial of Service via management API atom table exhaustion
CVE-2026-66073
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: RabbitMQ: Protected account deletion safeguard bypass via bulk-delete API
CVE-2026-66078
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Low
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Denial of service via atom exhaustion in OAuth2 JWT scope parsing
CVE-2026-66071
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
rabbitmq-server: rabbitmq-server: Stored Cross-Site Scripting via TLS peer certificate in stream-management UI
CVE-2026-67239
Red Hat Hardened Images/rabbitmq-server4.2
Red Hat OpenStack Platform 13 (Queens)/rabbitmq-server
Red Hat
Medium
No fix reported
Not recorded
Previous
1
2
Next