{
  "@id": "urn:uuid:aa62e4a1-504e-44d7-87a9-e46c1bd7b4b8",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-10-27T07:07:00.177330+00:00",
  "statements": [
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2023-46120 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2023-46120"
      },
      "action_statement": "Vulnerability CVE-2023-46120 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-106121 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-106121"
      },
      "action_statement": "Vulnerability CVE-2026-106121 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-106122 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-106122"
      },
      "action_statement": "Vulnerability CVE-2026-106122 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-106123 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-106123"
      },
      "action_statement": "Vulnerability CVE-2026-106123 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-61634 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-61634"
      },
      "action_statement": "Vulnerability CVE-2026-61634 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-63335 is fixed in version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-63335"
      }
    },
    {
      "status": "affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-63336 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-63336"
      },
      "action_statement": "Vulnerability CVE-2026-63336 affects version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client."
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-63337 is fixed in version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-63337"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-27T07:07:00.177330+00:00",
      "status_notes": "Vulnerability CVE-2026-69219 is fixed in version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-69219"
      }
    },
    {
      "status": "fixed",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-69220 is fixed in version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client.",
      "vulnerability": {
        "name": "CVE-2026-69220"
      }
    },
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/com.rabbitmq/amqp-client@5.4.3-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-21T15:09:40.979519+00:00",
      "status_notes": "Vulnerability CVE-2026-75516 does not affect version 5.4.3-tuxcare.1 of com.rabbitmq:amqp-client. not_affected \u2014 Version 5.4.3 does not contain the vulnerable code pattern described in CVE-2026-75516. The CVE concerns a specific issue where frameMax=0 defeats the maxInboundMessageBodySize protection via Math.min logic, but version 5.4.3 predates the introduction of maxInboundMessageBodySize entirely (added in commit 714aae60, which is not in 5.4.3's history). The Math.min pattern and Utils.inboundFrameMax...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-75516"
      },
      "impact_statement": "not_affected \u2014 Version 5.4.3 does not contain the vulnerable code pattern described in CVE-2026-75516. The CVE concerns a specific issue where frameMax=0 defeats the maxInboundMessageBodySize protection via Math.min logic, but version 5.4.3 predates the introduction of maxInboundMessageBodySize entirely (added in commit 714aae60, which is not in 5.4.3's history). The Math.min pattern and Utils.inboundFrameMax..."
    }
  ]
}