CVE-2026-75516
HighAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.005
- 44th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 79
- of 17,813 indexed, latest versions
- Container images
- 93
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
Carried by container images the latest versions of 79 of 17,813 indexed charts deploy, on 93 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| amqp-clientmaven | 4.8.0, 4.11.3, 4.12.0, 5.0.0+22 more | 5.34.0 | 93 |
- OSV records
- GHSA-jh4v-gfqj-7rhx
Charts affected
79 by stars
Container images carrying it
93 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hugohg34/ | 171f61e8d7e2 | amqp-client | 5.34.0 | 1 |
| j4ckhunter/ | bb7a429e3e75 | amqp-client | 5.34.0 | 1 |
| j4ckhunter/ | 6ba447609b12 | amqp-client | 5.34.0 | 1 |
| labs64/ | c7b26d3ca11c | amqp-client | 5.34.0 | 1 |
| lavandadelpatio/ | 94e225a5a6f8 | amqp-client | 5.34.0 | 1 |
| lavandadelpatio/ | 92de3c3426d2 | amqp-client | 5.34.0 | 1 |
| lavandadelpatio/ | d2cba20aa4d8 | amqp-client | 5.34.0 | 1 |
| lavandadelpatio/ | ded9377636e9 | amqp-client | 5.34.0 | 1 |
| lavandadelpatio/ | f36af885e915 | amqp-client | 5.34.0 | 1 |
| library/ | 17a4f64e9cf5 | amqp-client | 5.34.0 | 1 |
| library/ | 33eae14f0867 | amqp-client | 5.34.0 | 1 |
| lourdesmorente/ | 608745878cdb | amqp-client | 5.34.0 | 1 |
| maksimkavalenka/ | 64a25afb8748 | amqp-client | 5.34.0 | 1 |
| maksimkavalenka/ | 13ad9bb170a0 | amqp-client | 5.34.0 | 1 |
| molynx/ | 441c9f52f092 | amqp-client | 5.34.0 | 1 |
| openbas/ | d986d80b0a75 | amqp-client | 5.34.0 | 1 |
| opensearchproject/ | 43b0cdaf26ed | amqp-client | 5.34.0 | 1 |
| openzipkin/ | 197a9692f6a9 | amqp-client | 5.34.0 | 1 |
| openzipkin/ | 60c3970df479 | amqp-client | 5.34.0 | 1 |
| openzipkin/ | b5d51d1144e2 | amqp-client | 5.34.0 | 1 |
| oscarsotosanchez/ | 730c00a099b8 | amqp-client | 5.34.0 | 1 |
| pcarrascoponce/ | 981fc482442c | amqp-client | 5.34.0 | 1 |
| reportportal/ | 9df41f8fb320 | amqp-client | 5.34.0 | 1 |
| reportportal/ | bf193091525a | amqp-client | 5.34.0 | 1 |
| reportportal/ | 6a954407b417 | amqp-client | 5.34.0 | 1 |
| reportportal/ | 99d27d58d6b4 | amqp-client | 5.34.0 | 1 |
| reportportal/ | dc166c58485a | amqp-client | 5.34.0 | 1 |
| slagattollas/ | cecd95e31486 | amqp-client | 5.34.0 | 1 |
| thingsboard/ | bd45a09d85d9 | amqp-client | 5.34.0 | 1 |
| thingsboard/ | a06f53c5e2da | amqp-client | 5.34.0 | 1 |
| thingsboard/ | 030f316ce301 | amqp-client | 5.34.0 | 1 |
| thingsboard/ | 645f43b688f7 | amqp-client | 5.34.0 | 1 |
| thingsboard/ | f40a542832c4 | amqp-client | 5.34.0 | 1 |
| thingsboard/ | 2d17e4e36edc | amqp-client | 5.34.0 | 1 |
| torrespro/ | 6d3bd305a1ba | amqp-client | 5.34.0 | 1 |
| traccar/ | 621c8d6d46fd | amqp-client | 5.34.0 | 1 |
| trinodb/ | ee80ab5eeab2 | amqp-client | 5.34.0 | 1 |
| vlebediantsev/ | 10393a89b4a8 | amqp-client | 5.34.0 | 1 |
| vlebediantsev/ | df8bf38c535b | amqp-client | 5.34.0 | 1 |
| ghcr.io/ | 4a2824296412 | amqp-client | 5.34.0 | 1 |
| ghcr.io/ | af724c855f65 | amqp-client | 5.34.0 | 1 |
| public.ecr.aws/ | e85f034bcf48 | amqp-client | 5.34.0 | 1 |
| quay.io/ | 2b3554029737 | amqp-client | 5.34.0 | 1 |