CVE-2026-67414
MediumAdvisory
Published 21 Oct 2026In the index since 22 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.005
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 18,232 indexed, latest versions
- Container images
- 4
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ AMQP 1.0 parser: amplification memory-exhaustion DoS via zero-width array aggregation
Carried by container images the latest versions of 11 of 18,232 indexed charts deploy, on 4 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| rabbitmqbitnami | 4.1.2-0, 4.1.3-0, 4.2.2-0 | 4.0.24 | 4 |
- OSV records
- BIT-rabbitmq-2026-67414
- Also known as
- GHSA-w6mq-4qpx-v7mh
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.23 | 1 of 42See more | 70,040 |
| openctihelm-openctiVerified publisher | 3.0.24 | 1See more | — |
| infrahubinfrahubVerified publisher | 4.34.1 | 1See more | — |
| infrahub-enterpriseinfrahub-enterpriseVerified publisher | 4.22.1 | 1See more | — |
| arlas-aiasarlas-stackVerified publisher | 28.10.0 | 1 of 22See more | 154,491 |
| hatchet-hahatchetOfficialVerified publisher | 0.20.0 | 1 of 8See more | 9,515 |
| hatchet-stackhatchetOfficialVerified publisher | 0.20.0 | 1 of 8See more | 9,515 |
| openaevhelm-openbasVerified publisher | 2.0.16 | 1See more | — |
| openbashelm-openbasVerified publisher | 1.8.14 | 1 of 7See more | 83,823 |
| ibm-ucv-prodibm-helm | 5.3.0 | 1 of 16See more | 13,868 |
| rabbitmqwiremindVerified publisher | 16.0.17 | 1 of 1See more | 3,277 |
Container images carrying it
4 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 9e635efba431 | rabbitmq | 4.0.24 | 5 |
| bitnamilegacy/ | fac502149c40 | rabbitmq | 4.0.24 | 4 |
| bitnamilegacy/ | 74a3d7c747eb | rabbitmq | 4.0.24 | 1 |
| ghcr.io/ | 1572e12bc93c | rabbitmq | 4.0.24 | 1 |