All vulnerabilities

Servers and applications

GHSA-mhh3-4wv2-rrj7

SASL credentials are not redacted from `amqp10_client` crash dumps and `sys:get_status` output

Severity
Medium 5.7
Published
25 Oct 2026
Last changed
25 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
3.13.21, 4.1.17, 4.2.12, 4.3.7
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
RabbitMQServers and applications · github:rabbitmq/rabbitmq-server
  • From 3.13.0 before 3.13.21
  • From 4.1.0 before 4.1.17
  • From 4.2.0 before 4.2.12
  • From 4.3.0 before 4.3.7

References