{ "@id": "urn:uuid:40ce46de-2789-45b3-97a5-63d57579de52", "role": "Document Creator", "author": "https://tuxcare.com", "version": 2, "@context": "https://openvex.dev/ns/v0.2.0", "timestamp": "2026-10-21T14:16:05.283827+00:00", "statements": [ { "status": "affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-106121 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-106121" }, "action_statement": "Vulnerability CVE-2026-106121 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-106122 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-106122" }, "action_statement": "Vulnerability CVE-2026-106122 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-106123 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-106123" }, "action_statement": "Vulnerability CVE-2026-106123 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client." }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-61634 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-61634" }, "action_statement": "Vulnerability CVE-2026-61634 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client." }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:16:05.283827+00:00", "status_notes": "Vulnerability CVE-2026-63335 is fixed in version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-63335" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:16:05.283827+00:00", "status_notes": "Vulnerability CVE-2026-63336 is fixed in version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-63336" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:16:05.283827+00:00", "status_notes": "Vulnerability CVE-2026-63337 is fixed in version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-63337" } }, { "status": "fixed", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:16:05.283827+00:00", "status_notes": "Vulnerability CVE-2026-69219 is fixed in version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-69219" } }, { "status": "affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-69220 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client.", "vulnerability": { "name": "CVE-2026-69220" }, "action_statement": "Vulnerability CVE-2026-69220 affects version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client." }, { "status": "not_affected", "products": [ { "@id": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1", "identifiers": { "purl": "pkg:maven/com.rabbitmq/amqp-client@5.18.0-tuxcare.1" } } ], "timestamp": "2026-10-21T14:15:39.956217+00:00", "status_notes": "Vulnerability CVE-2026-75516 does not affect version 5.18.0-tuxcare.1 of com.rabbitmq:amqp-client. not_affected \u2014 Version 5.18.0 is not affected by CVE-2026-75516. The vulnerability requires the specific code pattern `_frameHandler.setFrameMax(Math.min(maxInboundMessageBodySize, frameMax))` where frameMax=0 defeats the Math.min comparison, ultimately allowing unbounded allocations via `Utils.framePayloadLimit(0)` returning Integer.MAX_VALUE. This pattern is architecturally absent from version 5.18.0. The t...", "justification": "vulnerable_code_not_in_execute_path", "vulnerability": { "name": "CVE-2026-75516" }, "impact_statement": "not_affected \u2014 Version 5.18.0 is not affected by CVE-2026-75516. The vulnerability requires the specific code pattern `_frameHandler.setFrameMax(Math.min(maxInboundMessageBodySize, frameMax))` where frameMax=0 defeats the Math.min comparison, ultimately allowing unbounded allocations via `Utils.framePayloadLimit(0)` returning Integer.MAX_VALUE. This pattern is architecturally absent from version 5.18.0. The t..." } ] }