CVE-2026-75516
HighAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.005
- 44th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 79
- of 17,813 indexed, latest versions
- Container images
- 93
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
Carried by container images the latest versions of 79 of 17,813 indexed charts deploy, on 93 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| amqp-clientmaven | 4.8.0, 4.11.3, 4.12.0, 5.0.0+22 more | 5.34.0 | 93 |
- OSV records
- GHSA-jh4v-gfqj-7rhx
Charts affected
79 by stars
Container images carrying it
93 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| codeurjc/ | 310bea5b1ee7 | amqp-client | 5.34.0 | 8 |
| mastercloudapps/ | 40a950b311b2 | amqp-client | 5.34.0 | 4 |
| mastercloudapps/ | f3d24dfe2686 | amqp-client | 5.34.0 | 4 |
| codeurjc/ | 800cf520c245 | amqp-client | 5.34.0 | 3 |
| apache/ | 0116fb802786 | amqp-client | 5.34.0 | 2 |
| geoservercloud/ | 99540eef78ad | amqp-client | 5.34.0 | 2 |
| geoservercloud/ | 5c254c53a357 | amqp-client | 5.34.0 | 2 |
| geoservercloud/ | c687b1cbc891 | amqp-client | 5.34.0 | 2 |
| geoservercloud/ | 5288f320cf36 | amqp-client | 5.34.0 | 2 |
| geoservercloud/ | a30a60ac6cd0 | amqp-client | 5.34.0 | 2 |
| graviteeio/ | 05fd67a93056 | amqp-client | 5.34.0 | 2 |
| graviteeio/ | 27374522cd04 | amqp-client | 5.34.0 | 2 |
| hookiesolutions/ | 0629694246ba | amqp-client | 5.34.0 | 2 |
| ghcr.io/ | 536358d7b17e | amqp-client | 5.34.0 | 2 |
| adagber/ | e5c1ed097752 | amqp-client | 5.34.0 | 1 |
| adeptiainc/ | 8607f4f29732 | amqp-client | 5.34.0 | 1 |
| adeptiainc/ | f1087da3da0b | amqp-client | 5.34.0 | 1 |
| amartinm82/ | 1184353ff57b | amqp-client | 5.34.0 | 1 |
| apache/ | 0cef139b6bf1 | amqp-client | 5.34.0 | 1 |
| apachepinot/ | 0018bb04ced7 | amqp-client | 5.34.0 | 1 |
| apachepulsar/ | 16f9fdab3fa6 | amqp-client | 5.34.0 | 1 |
| arturisimo/ | fff9de644941 | amqp-client | 5.34.0 | 1 |
| blackducksoftware/ | 90cca32de2cc | amqp-client | 5.34.0 | 1 |
| chandanteekinavar/ | 0cf52bf5ee9a | amqp-client | 5.34.0 | 1 |
| conductoross/ | 9fba127693e6 | amqp-client | 5.34.0 | 1 |
| davidvmar/ | 0d221e834a21 | amqp-client | 5.34.0 | 1 |
| erudikaltd/ | 235e0bc53da2 | amqp-client | 5.34.0 | 1 |
| expediagroup/ | 4f2cf61e7de9 | amqp-client | 5.34.0 | 1 |
| farberg/ | 4b4a22487394 | amqp-client | 5.34.0 | 1 |
| fimperato/ | 604012b77841 | amqp-client | 5.34.0 | 1 |
| fjvela/ | 70cebf67bd66 | amqp-client | 5.34.0 | 1 |
| flowable/ | b7ae287502cd | amqp-client | 5.34.0 | 1 |
| franrobles8/ | 99985392d63c | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | b04ed89b5d2b | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 318254b52f96 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 5dc0c93a1710 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 4f077124f591 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 4f91e3048ac8 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 299f0d6232d1 | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 8c70ee06d5ab | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 42775ba6a4da | amqp-client | 5.34.0 | 1 |
| geoservercloud/ | 5164f687ce4d | amqp-client | 5.34.0 | 1 |
| graylog2/ | 8ff28c66e6c1 | amqp-client | 5.34.0 | 1 |
| graylog/ | 19de1aff48c2 | amqp-client | 5.34.0 | 1 |
| graylog/ | 598bd41fefd5 | amqp-client | 5.34.0 | 1 |
| graylog/ | bf3e1e7b7352 | amqp-client | 5.34.0 | 1 |
| graylog/ | 8a1f641cd7aa | amqp-client | 5.34.0 | 1 |
| huertaslopez/ | e2c18bd65472 | amqp-client | 5.34.0 | 1 |