CVE-2026-67413
MediumAdvisory
Published 1 Oct 2026In the index since 2 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.003
- 21st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 12
- of 17,985 indexed, latest versions
- Container images
- 4
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ: Authenticated RabbitMQ JMS Topic Selector Users Can Consume Broker CPU with an Unbounded LIKE Regular Expression
Carried by container images the latest versions of 12 of 17,985 indexed charts deploy, on 4 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 4.1.2-0, 4.1.3-0, 4.2.2-0 | 4.0.23 | 4 |
- OSV records
- BIT-rabbitmq-2026-67413
- Also known as
- GHSA-chxf-3hfg-j8f7
Charts affected
12 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.19 | 1See more | — |
| openctihelm-openctiVerified publisher | 3.0.14 | 1See more | — |
| infrahubinfrahubVerified publisher | 4.33.4 | 1See more | — |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.21.1 | 1See more | — |
| squestchristianhuthVerified publisher | 6.6.8 | 1 of 4See more | 11,073 |
| arlas-aiasarlas-stackVerified publisher | 28.9.0 | 1 of 22See more | 42,910 |
| hatchet-hahatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| hatchet-stackhatchetOfficialVerified publisher | 0.19.0 | 1 of 8See more | 7,921 |
| openaevhelm-openbasVerified publisher | 2.0.8 | 1 of 7See more | 7,757 |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 27,052 |
| ibm-ucv-prodibm-helm | 5.3.0 | 1 of 16See more | 12,575 |
| rabbitmqwiremindVerified publisher | 16.0.17 | 1 of 1See more | 2,698 |
Container images carrying it
4 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | rabbitmq | 4.0.23 | 6 |
| bitnamilegacy/ | fac502149c40 | rabbitmq | 4.0.23 | 4 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 4.0.23 | 1 |
| ghcr.io/ | 1572e12bc93c | rabbitmq | 4.0.23 | 1 |