amqp091-go: Pre-negotiation frame limit is not enforced to 4KB

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-107386 · Microsoft / collected KEV context

EUVD-2026-95161

GHSA-w6r9-248c-frg8

GO-2026-6700

cve-program · CVE-2026-107386

• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8
• https://github.com/rabbitmq/amqp091-go/pull/377
• https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0

euvd · EUVD-2026-95161

• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8
• https://github.com/rabbitmq/amqp091-go/pull/377
• https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0

nvd · CVE-2026-107386

• https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
• https://github.com/rabbitmq/amqp091-go/pull/377
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0
• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8

osv · GHSA-w6r9-248c-frg8

• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8
• https://github.com/rabbitmq/amqp091-go/pull/377
• https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
• https://github.com/rabbitmq/amqp091-go
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0

osv · GO-2026-6700

• https://github.com/rabbitmq/amqp091-go/security/advisories/GHSA-w6r9-248c-frg8
• https://github.com/rabbitmq/amqp091-go/commit/6723e8cff8710f0a6bf5fb4af375e285052535b3
• https://github.com/rabbitmq/amqp091-go/pull/377
• https://github.com/rabbitmq/amqp091-go/releases/tag/v1.14.0

No related operational record is retained in the current change model.