How many CVEs have patched dispatcher?

5 published CVEs changed dispatcher in rabbitmq/rabbitmq-server, in 7 distinct patches totalling 5 changed lines, between 2026 and 2026.

What is the latest CVE that changed dispatcher?

CVE-2026-67418 (RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers), published 2026-10-14, changed lines 227 of deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl.

How does dispatcher compare to the rest of rabbitmq/rabbitmq-server?

rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total; 5 of them changed dispatcher.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

rabbitmq/rabbitmq-server

Function

2 files

dispatcher

Name: dispatcher in rabbitmq/rabbitmq-server: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Defined in 2 files

Last patched October 14, 2026

5

CVEs

That changed this function

7

Distinct patches

Backports counted once

5

Lines changed

Added plus removed

2026

Years

By CVE publication date

Overview

dispatcher in rabbitmq/rabbitmq-server was changed by 5 published CVE fixes in 2026, in 7 distinct patches that added or removed 5 lines in total.

The name occurs in 2 files: deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl, deps/rabbitmq_stream_management/src/rabbit_stream_super_stream_mgmt.erl.

rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total, so 13% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed dispatcher, newest first, with the lines each fix touched.

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
CVE-2026-67418 · deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl · line 227 · +1 −0
Medium · CVSS 5.3
EPSS 0.4%2026-10-14
RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
CVE-2026-67416 · deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl · line 227 · +1 −0
Medium · CVSS 5.3
EPSS 0.5%2026-10-14
RabbitMQ: Stream Management Super-Stream Binding Keys Allocation Allows Low-Privilege Node Denial of Service
CVE-2026-67408 · deps/rabbitmq_stream_management/src/rabbit_stream_super_stream_mgmt.erl · line 26 · +1 −0
High · CVSS 7.1
EPSS 0.4%2026-09-25
RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations
CVE-2026-57219 · deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl · line 217 · +0 −1
High · CVSS 8.7
EPSS 2.8%2026-07-10
RabbitMQ: Unsanitized vhost names allow for XSS in management UI
CVE-2026-44839 · deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl · line 120 · +1 −0
Medium · CVSS 5.6
EPSS 0.2%2026-05-27

Get an alert when the next CVE fix lands in rabbitmq/rabbitmq-server, with the patched functions.

Monitor rabbitmq-server CVEs

Other functions in these files

Functions in the same files that CVE fixes also changed.

Other hotspots in the repository

Functions in rabbitmq/rabbitmq-server changed by the most CVE fixes.

check_user_loopback2 CVEs · deps/rabbitmq_stream/src/rabbit_stream_reader.erl websocket_init2 CVEs · deps/rabbitmq_web_stomp/src/rabbit_web_stomp_handler.erl load_init_data2 CVEs · deps/rabbitmq_management/priv/www/js/main.js setup_global_vars2 CVEs · deps/rabbitmq_management/priv/www/js/global.js update_cluster_name_ui2 CVEs · deps/rabbitmq_management/priv/www/js/global.js load_init_data_and_ui2 CVEs · deps/rabbitmq_management/priv/www/js/main.js

All patched functions in rabbitmq/rabbitmq-server

Frequently asked questions

Common questions about CVE fixes to dispatcher.

How many CVEs have patched dispatcher?: 5 published CVEs changed dispatcher in rabbitmq/rabbitmq-server, in 7 distinct patches totalling 5 changed lines, between 2026 and 2026.
What is the latest CVE that changed dispatcher?: CVE-2026-67418 (RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers), published 2026-10-14, changed lines 227 of deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl.
How does dispatcher compare to the rest of rabbitmq/rabbitmq-server?: rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total; 5 of them changed dispatcher.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track rabbitmq/rabbitmq-server CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing