{"id":"GO-2026-6700","revision":"6f52a05240e54af8ba6959eaddad446e","records":[{"revision":"6f52a05240e54af8ba6959eaddad446e","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6700","aliases":["CVE-2026-107386","GHSA-w6r9-248c-frg8"],"title":"Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go","description":"Pre-negotiation frame limit is not enforced to 4KB in github.com/rabbitmq/amqp091-go","state":0,"publishedAt":"2026-10-19T21:08:21+00:00","modifiedAt":"2026-10-19T21:31:49.5217203+00:00","affected":[{"ecosystem":"Go","name":"github.com/rabbitmq/amqp091-go","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.14.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8","https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3","https://github.com/rabbitmq/amqp091-go/pull/377","https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6700","license":"OSV · upstream source license applies","key":"osv:GO-2026-6700","identifiers":["GO-2026-6700","CVE-2026-107386","GHSA-w6r9-248c-frg8"]},"retained":false,"historicalAffected":[]}],"coverage":[]}