CVE-2026-77406
HighAdvisory
Published 17 Sept 2026In the index since 18 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.004
- 35th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 124
- of 17,803 indexed, latest versions
- Container images
- 98
- deployed by those charts
- Fix available
- 1 of 1
- affected package
RabbitMQ amqp091-go: Consumer Message Flooding via Signed-to-Unsigned Integer Casting in Qos Configuration
Carried by container images the latest versions of 124 of 17,803 indexed charts deploy, on 98 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.1.0, v1.5.0, v1.6.1, v1.7.0+5 more | 1.13.0 | 98 |
- OSV records
- GHSA-rm6m-hrcw-jw33
- Trending
- Rank 36 in indexed charts, since 18 Sept 2026. See the ranking →
Charts affected
124 by stars
Container images carrying it
98 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| lumenvox/ | 6420a6e7d6c2 | github.com/ | 1.13.0 | 1 |
| lumenvox/ | c961fe78e2ca | github.com/ | 1.13.0 | 1 |
| minio/ | 391d1d45fdbe | github.com/ | 1.13.0 | 1 |
| minio/ | 4c4a4876193f | github.com/ | 1.13.0 | 1 |
| minio/ | 551682a57a94 | github.com/ | 1.13.0 | 1 |
| minio/ | 6d770d7f255c | github.com/ | 1.13.0 | 1 |
| minio/ | d249d1fb6966 | github.com/ | 1.13.0 | 1 |
| minio/ | fc6bedc99355 | github.com/ | 1.13.0 | 1 |
| otel/ | 37fa87091cfa | github.com/ | 1.13.0 | 1 |
| otel/ | 3bc07732530c | github.com/ | 1.13.0 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | 1.13.0 | 1 |
| otel/ | 923eb1cfae32 | github.com/ | 1.13.0 | 1 |
| otel/ | a7343f018690 | github.com/ | 1.13.0 | 1 |
| otel/ | b3079f45e19b | github.com/ | 1.13.0 | 1 |
| otel/ | f2f01157055a | github.com/ | 1.13.0 | 1 |
| otel/ | faf125d656fa | github.com/ | 1.13.0 | 1 |
| pgsty/ | 2711cdc5bce0 | github.com/ | 1.13.0 | 1 |
| pgsty/ | b616a0cf8cb2 | github.com/ | 1.13.0 | 1 |
| sysadminsmedia/ | 56e880b62309 | github.com/ | 1.13.0 | 1 |
| udhos/ | 474c467bbf42 | github.com/ | 1.13.0 | 1 |
| versity/ | d6ec798f66ca | github.com/ | 1.13.0 | 1 |
| versity/ | f730e0dbc1ef | github.com/ | 1.13.0 | 1 |
| wait4x/ | 4dcd86307de1 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 6b99ee9feece | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | a96e06ec5e9f | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | f80349eb018b | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 69b55a1c1c5d | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 84cb5a2b8b81 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 02348a19aeae | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 112fc427d933 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 72dc058e478d | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | fe74c7b88495 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 167fd532bd43 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 27286536a8a7 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 73a2ebae4413 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | f312f50ddc57 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 349f7dca95ec | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 695e7fd14483 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 2c807cd41ed4 | github.com/ | 1.13.0 | 1 |
| ghcr.io/ | 21715979aefa | github.com/ | 1.13.0 | 1 |
| public.ecr.aws/ | 08c90bd040bf | github.com/ | 1.13.0 | 1 |
| quay.io/ | a83d2699ae53 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 5702ea361420 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 796f75ea413b | github.com/ | 1.13.0 | 1 |
| quay.io/ | c6b68f158628 | github.com/ | 1.13.0 | 1 |
| quay.io/ | fa948df30d44 | github.com/ | 1.13.0 | 1 |
| quay.io/ | 23329c3368e4 | github.com/ | 1.13.0 | 1 |