CVE-2026-67230
MediumAdvisory
Published 1 Oct 2026In the index since 2 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.005
- 38th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 17,985 indexed, latest versions
- Container images
- 3
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ: Web-STOMP unbounded pre-auth accumulation
Carried by container images the latest versions of 11 of 17,985 indexed charts deploy, on 3 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 4.1.2-0, 4.1.3-0 | 3.13.15 | 3 |
- OSV records
- BIT-rabbitmq-2026-67230
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.19 | 1See more | — |
| openctihelm-openctiVerified publisher | 3.0.14 | 1See more | — |
| infrahubinfrahubVerified publisher | 4.33.4 | 1See more | — |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.21.1 | 1See more | — |
| squestchristianhuthVerified publisher | 6.6.8 | 1 of 4See more | 11,073 |
| arlas-aiasarlas-stackVerified publisher | 28.9.0 | 1 of 22See more | 42,910 |
| hatchet-hahatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| hatchet-stackhatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| openaevhelm-openbasVerified publisher | 2.0.8 | 1 of 7See more | 7,757 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 27,052 |
| ibm-ucv-prodibm-helm | 5.3.0 | 1 of 16See more | 12,575 |
Container images carrying it
3 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | rabbitmq | 3.13.15 | 6 |
| bitnamilegacy/ | fac502149c40 | rabbitmq | 3.13.15 | 4 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 3.13.15 | 1 |