CVE-2026-66074
MediumAdvisory
Published 1 Oct 2026In the index since 2 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 13
- of 17,985 indexed, latest versions
- Container images
- 5
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ: ReDoS via management API ?name= filter
Carried by container images the latest versions of 13 of 17,985 indexed charts deploy, on 5 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 3.13.7-0, 4.1.2-0, 4.1.3-0, 4.2.2-0 | 3.13.15 | 5 |
- OSV records
- BIT-rabbitmq-2026-66074
- Also known as
- GHSA-rg5q-vcgf-rfh7
Charts affected
13 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.19 | 1See more | — |
| openctihelm-openctiVerified publisher | 3.0.14 | 1See more | — |
| infrahubinfrahubVerified publisher | 4.33.4 | 1See more | — |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.21.1 | 1See more | — |
| squestchristianhuthVerified publisher | 6.6.8 | 1 of 4See more | 11,073 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 56,801 |
| arlas-aiasarlas-stackVerified publisher | 28.9.0 | 1 of 22See more | 42,910 |
| hatchet-hahatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| hatchet-stackhatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| openaevhelm-openbasVerified publisher | 2.0.8 | 1 of 7See more | 7,757 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 27,052 |
| ibm-ucv-prodibm-helm | 5.3.0 | 1 of 16See more | 12,575 |
| rabbitmqwiremindVerified publisher | 16.0.17 | 1 of 1See more | 2,698 |
Container images carrying it
5 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | rabbitmq | 3.13.15 | 6 |
| bitnamilegacy/ | fac502149c40 | rabbitmq | 3.13.15 | 4 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 3.13.15 | 1 |
| bitnamilegacy/ | cd593809e359 | rabbitmq | 3.13.15 | 1 |
| ghcr.io/ | 1572e12bc93c | rabbitmq | 3.13.15 | 1 |