VersionDrift
Product

Is RabbitMQ 4.3.5 affected?

Aug 17, 2026 · Release notes ↗

Update

3 known vulnerabilities affect 4.3.5 (highest CVSS 4.9).

3 newer releases in its track, up to 4.4.0. What changed up to 4.4.0

Vulnerabilities affecting 4.3.5

  • 4.9
    GHSA-j6hc-926v-qwq2 RabbitMQ STOMP consumers retain OAuth queue access after JWT expiration fixed in 4.3.6
  • 2.3
    GHSA-6jvc-jx8w-m757 RabbitMQ Stream Publisher Management API Discloses Unauthorized Vhost and Stream Existence fixed in 4.3.6
  • 2.3
    GHSA-342v-cj47-c9g8 Cross-vhost Stream consumer virtual-host existence disclosure fixed in 4.3.6

Newer releases

4.4.0Oct 19, 20264.3.5 → 4.4.0
4.3.7Oct 20, 20264.3.5 → 4.3.7
4.3.6Sep 14, 20264.3.5 → 4.3.6
See how far your stack has drifted from upstream. Release data from vendors’ own sources · feed under CC BY 4.0 · Code under AGPL-3.0 Settings Feed status