THREATOPS
THREAT OPS › Threat News › [GHSA] GHSA-93j5-89vc-pph4 (high) — RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS

[GHSA] GHSA-93j5-89vc-pph4 (high) — RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS

medgithub_advisoriesPublished 2026-08-18

GHSA-93j5-89vc-pph4 Severity: high CVE: CVE-2026-69220

RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS

## Summary

`ValueReader.readTable()` and `readArray()` recursively call `readFieldValue()` with no depth limit. A malicious AMQP peer can crash the client JVM by sending a deeply nested table structure.

## Vulnerable Code

`src/main/java

Indicators of compromise

Original source: https://github.com/advisories/GHSA-93j5-89vc-pph4