[GHSA] GHSA-68mj-5wr7-6fgg (high) — RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

GHSA-68mj-5wr7-6fgg Severity: high CVE: CVE-2026-69219

RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

## Summary

`ValueReader.readBytes()` allocates a byte array sized by a wire-declared content length without validating it against actual frame data. A malicious AMQP peer triggers OOM by declaring a ~2GB string/bytes field.

## Vulnerab