Product Release Advisory - Open Source RabbitMQ 4.0.19
Product Release Advisory
|
Advisory ID: |
TNZ-2026-0331 |
|
Severity: |
[High] |
|
Issue Date: |
2026-06-18 |
|
Updated on: |
2026-07-23 |
|
Synopsis |
Open Source RabbitMQ 4.0.19 resolves 2 security vulnerabilities: • CVE-2026-57212 (high): RabbitMQ management HTTP API accepts request bodies larger than configured max_http_body_size • CVE-2026-57213 (medium): Stored XSS in RabbitMQ federation management plugin via unsanitized consumer_tag rendering |
Product Version Release Advisory
- Open Source RabbitMQ 4.0.19
Security Fixes
This release has the following security fixes, listed by component and area.
|
Component |
Vulnerabilities Resolved |
|
Management Plugin |
|
|
Management Plugin |
Product Versions Affected
- Open Source RabbitMQ >= 4.0.0, < 4.0.19
Other Products Versions Affected
- VMware Tanzu RabbitMQ >= 4.0.0, < 4.0.19
- VMware Tanzu RabbitMQ on Kubernetes >= 4.0.0, < 4.0.19
History
2026-07-14: Initial vulnerability report published.
Contact
E-mail: [email protected]
VMware Tanzu Security Advisories