Security Feed

See the latest insights and analysis from our MDR team.
RSS for Slack
CVE-2026-79921
By Yoav Nesher | 
4 September 2026

amqp091-go oversized AMQP content frames bypass `frame_max` causing memory exhaustion DoS

In rabbitmq/amqp091-go < 1.13.0, a malicious or compromised AMQP broker can send content body frames exceeding the negotiated frame_max, forcing the client to allocate and process oversized payloads. This violates AMQP framing constraints and can trigger high memory consumption and application-layer DoS. Upgrade to 1.13.0 (no workaround noted).

Full Feed
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Threat RSS
Add the Upwind RSS Feed to Slack
Connect the Upwind RSS Feed to your Slack.
Follow the how-to here.
Main RSS