Skip to main content
cve.nowby Sazabi
← Hex
HexPackage

rabbit_common

4 known vulnerabilities (3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 3 medium, 1 low
Registry
Hex

Advisories 4

  • CVE-2024-51988Medium 6.5

    HTTP API's queue deletion endpoint does not verify that the user has a required permission

    Affected: from 3.12.7, fixed in 3.12.11.

  • CVE-2023-46118Medium 4.9

    Denial of Service by publishing large messages over the HTTP API

    Affected: from 3.12.0, fixed in 3.12.7; from 3.11.0, fixed in 3.11.24.

  • CVE-2022-31008Medium 5.5

    Predictable credential obfuscation seed value used in rabbitmq-server

    Affected: from 3.10.0, fixed in 3.10.2; from 3.9.0, fixed in 3.9.18; from 3.8.0, fixed in 3.8.32.

  • RabbitMQ XSS attack via federation and shovel endpoints

    Affected: from 3.7.0, fixed in 3.7.20; from 3.8.0, fixed in 3.8.1.