CPE
The amqp091-go library fails to enforce negotiated frame size limits, allowing a malicious AMQP broker to trigger arbitrary memory allocation and application-layer denial of service via CVE-2026-79921.