CVE-2026-63336
MediumAdvisory
Published 18 Aug 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.1
- base score, highest
- EPSS
- 0.002
- 8th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 78
- of 17,781 indexed, latest versions
- Container images
- 92
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM
Carried by container images the latest versions of 78 of 17,781 indexed charts deploy, on 92 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| amqp-clientmaven | 4.8.0, 4.11.3, 4.12.0, 5.0.0+21 more | 5.33.0 | 92 |
- OSV records
- GHSA-5m9f-rphj-c435
Charts affected
78 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| graylogkong-zVerified publisher | 3.0.32 | 1 of 5See more | 2,699 |
| zipkincarlosjgp | 0.2.0 | 1 of 2See more | 3,229 |
| apim3graviteeioVerified publisher | 4.12.19 | 2 of 4See more | 4,806 |
| druiddruid-helmVerified publisher | 37.0.2 | 1 of 3See more | 3,812 |
| grayloggroundhog2k | 0.13.10 | 1 of 1See more | 1,074 |
| grayloggraylog2OfficialVerified publisher | 2.0.0 | 1 of 2See more | 1,500 |
| druidwiremindVerified publisher | 1.22.1 | 1 of 3See more | 7,930 |
| zipkinygqygq2Verified publisher | 2.1.4 | 1 of 4See more | 2,764 |
| kubernetes-loggingkubernetes-logging | 4.8.0 | 1 of 6See more | 10,530 |
| geoservercloudcamptocamp2 | 3.0.1 | 6 of 7See more | 10,546 |
| thingsboardcetic | 0.1.2 | 1 of 2See more | 5,235 |
| flowableflowable-oss | 7.1.0 | 1 of 2See more | 2,784 |
| apimgraviteeioVerified publisher | 4.12.19 | 2 of 4See more | 4,806 |
| oesopsmxVerified publisher | 4.0.32 | 1 of 25See more | 107,811 |
| thingsboard-clusterthingsboard-cluster-bettaVerified publisher | 0.2.26 | 1 of 6See more | 14,566 |
| migrationadeptia-connect-migrationVerified publisher | 4.8.1 | 1 of 1See more | 451 |
| geoserver-cloudcamptocamp2 | 0.0.5 | 5 of 11See more | 84,444 |
| geoserverCloudcamptocamp2 | 0.0.6 | 5 of 11See more | 84,444 |
| paraerudikaVerified publisher | 0.3.0 | 1 of 1See more | 1,086 |
| pitchforkexpediagroup | 0.1.4 | 1 of 1See more | 3,309 |
| traccarjeffrescVerified publisher | 0.2.0 | 1 of 2See more | 1,341 |
| auditflowlabs64io-helm-chartsVerified publisher | 0.12.1 | 1 of 3See more | 1,446 |
| Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher | 1.0.1 | 1 of 6See more | 19,187 |
| reportportalreportportal-ioOfficialVerified publisher | 26.8.12 | 3 of 15See more | 11,869 |
| logstashromanow-helm-chartsVerified publisher | 1.5.0 | 1 of 1See more | 7,529 |
| graylogt3n | 1.0.0 | 1 of 3See more | 8,063 |
| migrationadeptia-automate-migration | 5.2.9 | 1 of 1See more | 395 |
| d.vazquezm.2021_helmapphelmVerified publisher | 1.0.0 | 1 of 6See more | 19,745 |
| inbox-serverappscodeVerified publisher | 2025.12.25 | 1 of 1See more | 3,963 |
| inbox-server-distributedappscodeVerified publisher | 2025.12.25 | 1 of 4See more | 15,573 |
| james-komposeappscodeVerified publisher | 0.1.0 | 1 of 4See more | 16,975 |
| chart-app-vidapp-vid-chartVerified publisher | 0.0.7 | 1 of 2See more | 8,866 |
| blackduck-alertblackduck | 8.4.0 | 1 of 4See more | 4,292 |
| geoservercamptocamp2 | 0.0.3 | 5 of 12See more | 88,335 |
| consumer-helmconsumer-app-helm-chart | 0.1.0 | 1 of 1See more | 2,564 |
| eoloplannerdfa-amm-eoloplannerVerified publisher | 0.1.0 | 1 of 7See more | 27,550 |
| elk-stackelk-stack-test | 1.0.2 | 1 of 9See more | 2,942 |
| eolicplantseolicplantsVerified publisher | 0.1.0 | 1 of 7See more | 27,291 |
| eoloPlanteolo-plannerVerified publisher | 0.1.0 | 2 of 7See more | 27,537 |
| eoloplannereoloplannerVerified publisher | 0.1.0 | 2 of 7See more | 32,205 |
| eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher | 0.1.0 | 2 of 7See more | 27,537 |
| eoloplanner-mcaeoloplanner-mcaVerified publisher | 0.1.0 | 1 of 7See more | 27,256 |
| eoloplannereoloplanner-molynx-gat | 0.1.0 | 2 of 7See more | 28,482 |
| eolo-plannereolo-planner-repo | 0.1.0 | 1 of 7See more | 27,096 |
| eoloplanteoloplant | 1.0.0 | 2 of 7See more | 27,537 |
| eoloplantseoloplants-urjcVerified publisher | 0.1.0 | 2 of 7See more | 27,721 |
| servereoloserverVerified publisher | 0.1.0 | 2 of 7See more | 32,205 |
| findery-marketfindery-market | 0.1.0 | 1 of 7See more | 7,691 |
| grayloggraylogVerified publisher | 1.0.2 | 1 of 4See more | 5,261 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,541 |
Container images carrying it
92 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | 310bea5b1ee7 | amqp-client | 5.33.0 | 8 |
| mastercloudapps/ | 40a950b311b2 | amqp-client | 5.33.0 | 4 |
| mastercloudapps/ | f3d24dfe2686 | amqp-client | 5.33.0 | 4 |
| codeurjc/ | 800cf520c245 | amqp-client | 5.33.0 | 3 |
| apache/ | 0116fb802786 | amqp-client | 5.33.0 | 2 |
| geoservercloud/ | 99540eef78ad | amqp-client | 5.33.0 | 2 |
| geoservercloud/ | 5c254c53a357 | amqp-client | 5.33.0 | 2 |
| geoservercloud/ | c687b1cbc891 | amqp-client | 5.33.0 | 2 |
| geoservercloud/ | 5288f320cf36 | amqp-client | 5.33.0 | 2 |
| geoservercloud/ | a30a60ac6cd0 | amqp-client | 5.33.0 | 2 |
| graviteeio/ | 05fd67a93056 | amqp-client | 5.33.0 | 2 |
| graviteeio/ | 27374522cd04 | amqp-client | 5.33.0 | 2 |
| hookiesolutions/ | 0629694246ba | amqp-client | 5.33.0 | 2 |
| ghcr.io/ | 536358d7b17e | amqp-client | 5.33.0 | 2 |
| adagber/ | e5c1ed097752 | amqp-client | 5.33.0 | 1 |
| adeptiainc/ | 8607f4f29732 | amqp-client | 5.33.0 | 1 |
| adeptiainc/ | f1087da3da0b | amqp-client | 5.33.0 | 1 |
| amartinm82/ | 1184353ff57b | amqp-client | 5.33.0 | 1 |
| apache/ | 0cef139b6bf1 | amqp-client | 5.33.0 | 1 |
| apachepinot/ | 0018bb04ced7 | amqp-client | 5.33.0 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | amqp-client | 5.33.0 | 1 |
| arturisimo/ | fff9de644941 | amqp-client | 5.33.0 | 1 |
| blackducksoftware/ | 90cca32de2cc | amqp-client | 5.33.0 | 1 |
| chandanteekinavar/ | 0cf52bf5ee9a | amqp-client | 5.33.0 | 1 |
| conductoross/ | 9fba127693e6 | amqp-client | 5.33.0 | 1 |
| davidvmar/ | 0d221e834a21 | amqp-client | 5.33.0 | 1 |
| erudikaltd/ | 235e0bc53da2 | amqp-client | 5.33.0 | 1 |
| expediagroup/ | 4f2cf61e7de9 | amqp-client | 5.33.0 | 1 |
| farberg/ | 4b4a22487394 | amqp-client | 5.33.0 | 1 |
| fimperato/ | 604012b77841 | amqp-client | 5.33.0 | 1 |
| fjvela/ | 70cebf67bd66 | amqp-client | 5.33.0 | 1 |
| flowable/ | b7ae287502cd | amqp-client | 5.33.0 | 1 |
| franrobles8/ | 99985392d63c | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | b04ed89b5d2b | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 318254b52f96 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 5dc0c93a1710 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 4f077124f591 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 4f91e3048ac8 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 299f0d6232d1 | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 8c70ee06d5ab | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 42775ba6a4da | amqp-client | 5.33.0 | 1 |
| geoservercloud/ | 5164f687ce4d | amqp-client | 5.33.0 | 1 |
| graylog2/ | 8ff28c66e6c1 | amqp-client | 5.33.0 | 1 |
| graylog/ | 19de1aff48c2 | amqp-client | 5.33.0 | 1 |
| graylog/ | 598bd41fefd5 | amqp-client | 5.33.0 | 1 |
| graylog/ | e8431d59b84d | amqp-client | 5.33.0 | 1 |
| graylog/ | 8a1f641cd7aa | amqp-client | 5.33.0 | 1 |
| huertaslopez/ | e2c18bd65472 | amqp-client | 5.33.0 | 1 |