# org.apache.rocketmq:rocketmq-namesrv (Maven) vulnerabilities 2 known vulnerabilities (2 critical), with the versions each affects and the releases that fix them. ## At a glance - Latest release: 5.5.1 (Aug 20, 2026): no advisory affects it - Newest unaffected release: 5.5.1 (Aug 20, 2026), the latest release - Dependents: 1 - Releases: 41 since 4.0.0-incubating (Feb 11, 2017) - Registry: https://central.sonatype.com/artifact/org.apache.rocketmq/rocketmq-namesrv - Releases read: Nov 8, 2026 ## Version timeline Affected versions per advisory, in version order: - CVE-2023-37582: 4.0.0-incubating to 4.9.6 (4.9.7 is outside it); 5.0.0 to 5.1.1 (5.1.2 is outside it) - CVE-2023-33246: 4.0.0-incubating to 4.9.5 (4.9.6 is outside it); 5.0.0 to 5.1.0 (5.1.1 is outside it) ## Advisories (2) ### [CVE-2023-37582](https://cve.now/CVE-2023-37582): Apache RocketMQ: Possible remote code execution when using the update configuration function - Severity: Critical 9.8 - Published: Jul 12, 2023 - Affected: fixed in 4.9.7; from 5.0.0, fixed in 5.1.2. - Fixed in 4.9.7 (released Jun 12, 2023, 30 days before disclosure) and 5.1.2 (released Jun 12, 2023, 30 days before disclosure). - The latest release, 5.5.1, is not affected. ### [CVE-2023-33246](https://cve.now/CVE-2023-33246): Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function - Severity: Critical 9.8 ยท KEV - Published: May 24, 2023 - Affected: from 4.0.0, fixed in 4.9.6; from 5.0.0, fixed in 5.1.1. - Fixed in 4.9.6 (released May 17, 2023, 7 days before disclosure) and 5.1.1 (released May 15, 2023, 9 days before disclosure). - The latest release, 5.5.1, is not affected. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/maven/org.apache.rocketmq:rocketmq-namesrv Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.