Количество 8
Количество 8
GHSA-wmrr-4h5v-5ch7
AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure
CVE-2026-57218
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.
CVE-2026-57218
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.
CVE-2026-57218
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6.
CVE-2026-57218
RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ ...
ROS-20261103-80-0093
Уязвимость rabbitmq-server
ROS-20261103-73-0094
Уязвимость rabbitmq-server
openSUSE-SU-2026:21903-1
Security update for rabbitmq-server
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-wmrr-4h5v-5ch7 AMQP 0-9-1 in combination with OAuth 2: consumer persistence can lead to post-revocation message disclosure | 0% Низкий | 4 месяца назад | |
 | CVE-2026-57218 RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-57218 RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | CVE-2026-57218 RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ AMQP 0-9-1 allows an existing consumer to keep receiving messages after OAuth token expiry or connection.update_secret refresh to reduced scopes because existing consumers are not canceled or reauthorized at delivery time after the channel user state changes. This issue is fixed in version 4.2.6. | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
| CVE-2026-57218 RabbitMQ is a messaging and streaming broker. Prior to 4.2.6, RabbitMQ ... | CVSS3: 6.5 | 0% Низкий | 4 месяца назад |
 | ROS-20261103-80-0093 Уязвимость rabbitmq-server | 0% Низкий | 3 дня назад | |
| ROS-20261103-73-0094 Уязвимость rabbitmq-server | 0% Низкий | 3 дня назад | |
 | openSUSE-SU-2026:21903-1 Security update for rabbitmq-server | около 1 месяца назад |
Уязвимостей на страницу