How many CVEs have patched format?

2 published CVEs changed format in rabbitmq/rabbitmq-server, in 1 distinct patches totalling 2 changed lines, between 2026 and 2026.

What is the latest CVE that changed format?

CVE-2026-67418 (RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers), published 2026-10-14, changed lines 1501 of deps/rabbitmq_management/priv/www/js/main.js.

How does format compare to the rest of rabbitmq/rabbitmq-server?

rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total; 2 of them changed format.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

RadicalNotion.AI

Log in Create an account

rabbitmq/rabbitmq-server

Function

format

Name: format in rabbitmq/rabbitmq-server: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

deps/rabbitmq_management/priv/www/js/main.js

Last patched October 14, 2026

2

CVEs

That changed this function

1

Distinct patches

Backports counted once

2

Lines changed

Added plus removed

2026

Years

By CVE publication date

Overview

format in rabbitmq/rabbitmq-server was changed by 2 published CVE fixes in 2026, in 1 distinct patches that added or removed 2 lines in total.

rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total, so 5% of them touched this function.

CVEs that patched it

Every published CVE whose fix changed format, newest first, with the lines each fix touched.

RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers
CVE-2026-67418 · line 1501 · +1 −0
Medium · CVSS 5.3
EPSS 0.4%2026-10-14
RabbitMQ: AMQP 1.0 symbolic body descriptor prefix collisions bypass validation
CVE-2026-67416 · line 1501 · +1 −0
Medium · CVSS 5.3
EPSS 0.5%2026-10-14

Get an alert when the next CVE fix lands in rabbitmq/rabbitmq-server, with the patched functions.

Monitor rabbitmq-server CVEs

Other functions in these files

Functions in the same file that CVE fixes also changed.

Other hotspots in the repository

Functions in rabbitmq/rabbitmq-server changed by the most CVE fixes.

dispatcher4 CVEs · deps/rabbitmq_management/src/rabbit_mgmt_dispatcher.erl check_user_loopback2 CVEs · deps/rabbitmq_stream/src/rabbit_stream_reader.erl websocket_init2 CVEs · deps/rabbitmq_web_stomp/src/rabbit_web_stomp_handler.erl load_init_data2 CVEs · deps/rabbitmq_management/priv/www/js/main.js setup_global_vars2 CVEs · deps/rabbitmq_management/priv/www/js/global.js update_cluster_name_ui2 CVEs · deps/rabbitmq_management/priv/www/js/global.js

All patched functions in rabbitmq/rabbitmq-server

Frequently asked questions

Common questions about CVE fixes to format.

How many CVEs have patched format?: 2 published CVEs changed format in rabbitmq/rabbitmq-server, in 1 distinct patches totalling 2 changed lines, between 2026 and 2026.
What is the latest CVE that changed format?: CVE-2026-67418 (RabbitMQ MQTT 5: inapplicable PUBLISH property disconnects matching subscribers), published 2026-10-14, changed lines 1501 of deps/rabbitmq_management/priv/www/js/main.js.
How does format compare to the rest of rabbitmq/rabbitmq-server?: rabbitmq/rabbitmq-server has 39 CVEs with a located fix in total; 2 of them changed format.
What do the line numbers refer to?: Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track rabbitmq/rabbitmq-server CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing