Skip to content

[GHSA-mm8h-8587-p46h] com.rabbitmq:amqp-client: backports 5.14.3, 5.16.1 and 5.17.1 are not reflected - #9365

Open
zyl71 wants to merge 1 commit into
github:zyl71/advisory-improvement-9365from
zyl71:fix/GHSA-mm8h-8587-p46h
Open

[GHSA-mm8h-8587-p46h] com.rabbitmq:amqp-client: backports 5.14.3, 5.16.1 and 5.17.1 are not reflected#9365
zyl71 wants to merge 1 commit into
github:zyl71/advisory-improvement-9365from
zyl71:fix/GHSA-mm8h-8587-p46h

Conversation

@zyl71

@zyl71 zyl71 commented Sep 5, 2026

Copy link
Copy Markdown

Updates

  • Affected products

Comments
The referenced fix commit 714aae602dcae6cb4b53cadf009323ebac313cc8 ("Add max inbound message size to ConnectionFactory", 2023-06-15) was backported and released on Maven Central on 2023-06-29 as amqp-client 5.14.3, 5.16.1 and 5.17.1 (ten days after 5.18.0); the jars contain the added ConnectionFactory/frame-size handling. The current range < 5.18.0 still flags those patched releases. Suggested ranges: < 5.14.3 (patched 5.14.3), >= 5.15.0, < 5.16.1 (patched 5.16.1), >= 5.17.0, < 5.17.1 (patched 5.17.1).

@github-actions
github-actions Bot changed the base branch from main to zyl71/advisory-improvement-9365 September 5, 2026 04:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant