broker

2 results · Clear filters · Feed

• Medium 5.6
  CVE-2026-44839

  RabbitMQ: Unsanitized vhost names allow for XSS in management UI

  RabbitMQ is a messaging and streaming broker. From 3.7.0 to before 4.1.2 and 4.0.13, This vulnerability is fixed in 4.1.2 and 4.0.13.

  rabbitmq rabbitmq-server rabbitmq-server rabbitmq-server Debian Ubuntu Azure Linux
  May 27, 2026
• Medium 5.5
  CVE-2022-31008

  Predictable credential obfuscation seed value used in rabbitmq-server

  RabbitMQ is a multi-protocol messaging and streaming broker. In affected versions the shovel and federation plugins perform URI obfuscation in their worker (link) state. The encryption key used to encrypt the URI was seeded with a predictable secret. This mea…

  rabbitmq rabbitmq-server rabbitmq-server rabbit_common Debian Ubuntu Hex
  Oct 6, 2022