https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-106123.htmlhttps://patchthecve.com/cve/CVE-2026-106123.htmlMon, 19 Oct 2026 20:17:46 +0000MEDIUM 5.5: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.35.0, ConnectionFactoryConfigurator.load() includes the raw uri value in wrapped exceptions when AMQP URI parsing fails. Because the URI may contain a plaintext usernamehttps://patchthecve.com/cve/CVE-2026-106122.htmlhttps://patchthecve.com/cve/CVE-2026-106122.htmlFri, 09 Oct 2026 18:21:32 +0000HIGH 7.5: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by ValueWriter.writeShttps://patchthecve.com/cve/CVE-2026-106121.htmlhttps://patchthecve.com/cve/CVE-2026-106121.htmlFri, 09 Oct 2026 18:26:02 +0000MEDIUM 4.9: The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.37.0, com.rabbitmq.tools.json.JSONReader.read() fails to terminate when input ends inside a quoted string or a line comment because its string and whitespace scanners do