RabbitMQ 4.4.0

{
  "id": "0aa6b40e58551d185a446f284879ec7a02ab65112c639cdefd6f52f85872bd58",
  "url": "https://github.com/rabbitmq/rabbitmq-server/releases/tag/v4.4.0",
  "method": "llm",
  "payload": {
    "kind": "patch",
    "title": "RabbitMQ 4.4.0",
    "summary": "RabbitMQ 4.4.0 adds stricter validation of OpenID Connect discovery responses and new Web MQTT and Web STOMP origin-validation controls. The release notes do not explicitly identify these changes as security fixes.",
    "evidence": "OpenID Connect discovery responses fetched from identity providers are now validated according to OpenID Connect Discovery 1.0 spec seciton §4.3.",
    "products": [
      {
        "name": {
          "value": "RabbitMQ",
          "evidence": "RabbitMQ 4.4.0"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "4.4.0",
            "evidence": "RabbitMQ 4.4.0"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "github-rabbitmq-rabbitmq-server",
  "document_id": 22399,
  "published_at": "2026-10-19T07:22:40+00:00"
}