Security Feed
See the latest insights and analysis from our MDR team.
RSS for SlackCVE-2026-79921
By Yoav Nesher |
4 September 2026
amqp091-go oversized AMQP content frames bypass `frame_max` causing memory exhaustion DoS
In rabbitmq/amqp091-go < 1.13.0, a malicious or compromised AMQP broker can send content body frames exceeding the negotiated frame_max, forcing the client to allocate and process oversized payloads. This violates AMQP framing constraints and can trigger high memory consumption and application-layer DoS. Upgrade to 1.13.0 (no workaround noted).