Daily Stack Watch — August 1, 2026: RabbitMQ Leaks OAuth2 Secrets, pgvector Fixes a Buffer Overflow

Executive Summary

• RabbitMQ discloses CVE-2026-57219 (CVSS 8.7): an obsolete, unauthenticated HTTP API endpoint exposed the broker's OAuth2 client secret, letting an attacker impersonate the broker to the identity provider. Fixed in 4.2.6, 4.1.11, 4.0.20, and 3.13.15.
• pgvector 0.8.6 fixes a buffer overflow in IVFFlat index builds on 32-bit systems, plus a sparsevec cast bug and excess memory use during nested-loop index scans.
• Clerk ships self-serve OIDC SSO, extending its existing self-serve SAML support so org admins can configure enterprise OIDC connections without a feature flag.
• shadcn/ui 4.16.1, SvelteKit 2.70.2, and Prisma 7.9.1 all ship patch releases today — a CLI crash fix, a ReDoS fix in Accept-header parsing, and a precautionary transitive-dependency advisory response, respectively.
• Docker Engine 29.7.1 and Podman Desktop 1.29.1 land same-week regression fixes, and Astro 7.1.6 patches a static-build i18n bug.

RabbitMQ's Critical OAuth2 Secret Leak (CVE-2026-57219)

The most severe finding in today's audit is a RabbitMQ vulnerability rated CVSS 8.7: an obsolete, unauthenticated GET /api/auth HTTP API endpoint returned the broker's configured OAuth2 client secret to any caller. With that secret, an attacker can impersonate the broker to the identity provider and mint an admin-scoped token. A related, lower-severity issue tracked as CVE-2026-57221 (CVSS 5.3) lets any authenticated user enumerate queues and exchanges across tenants that should otherwise be isolated. Both affect RabbitMQ 3.13.0 and later; fixed builds are 4.2.6, 4.1.11, 4.0.20, and 3.13.15 (and everything from 4.3.0 onward).

If you operate RabbitMQ with OAuth2 authentication enabled — directly or through a managed provider — treat this as an urgent patch. Rotating the OAuth2 client secret with your identity provider after upgrading is a reasonable extra precaution given the secret may already have been exposed.

# Debian/Ubuntu package hosts
sudo apt-get update && sudo apt-get install rabbitmq-server=4.2.6-1

# then rotate the OAuth2 client secret with your IdP and update
# the broker's oauth_client_secret configuration accordingly

pgvector 0.8.6 Patches an IVFFlat Buffer Overflow

pgvector 0.8.6 fixes a buffer overflow that could occur when building IVFFlat indexes on 32-bit systems, corrects an array-to-sparsevec cast that failed to limit non-zero elements, and reduces excess memory usage during IVFFlat index scans inside nested-loop joins. If you run pgvector on Postgres with vector-search workloads in production RAG or embeddings pipelines, this is worth picking up in your next maintenance window.

ALTER EXTENSION vector UPDATE TO '0.8.6';

Clerk Ships Self-Serve OIDC SSO

Clerk's organization admins can now configure OpenID Connect enterprise connections directly from the <OrganizationProfile /> Security tab, without the previous experimental.oidcSelfServe flag (now a no-op). This brings OIDC to parity with Clerk's existing self-serve SAML flow, shipped alongside @clerk/[email protected]. Separately, Clerk has announced it is deprecating legacy CBC-mode TLS cipher suites on managed subdomains, effective January 18, 2027 — worth a look if you pin specific TLS ciphers in server-side HTTP clients talking to Clerk.

Full changelog entry →

Patch Roundup: shadcn/ui, SvelteKit, and Prisma

shadcn/ui 4.16.1 fixes an ENOENT crash in shadcn build when registry item names contain path segments, and forwards search query params (q, limit, offset) to registries for server-side search.

SvelteKit 2.70.2 closes a ReDoS (quadratic backtracking) vulnerability in how it parses the Accept header during content negotiation — a low-effort denial-of-service vector for any public SvelteKit endpoint. Update your @sveltejs/kit dependency to at least this version.

Prisma 7.9.1 responds to a security advisory flagged against a transitive dependency of @prisma/dev and the Prisma CLI. Prisma states the core CLI and @prisma/dev are not actually exploitable, but recommends upgrading anyway to stop the advisory from tripping automated security scanners in CI.

Also Shipping: Docker, Podman Desktop, Astro, and Cloudflare

• Docker Engine 29.7.1 is a same-week patch on top of 29.7.0, fixing image pulls that failed for layers lacking explicit parent-directory entries, and a CopyToContainer regression that rejected paths traversing absolute symlinks (e.g. /var/run → /run). No new CVE in this patch; 29.7.0 itself carried the fix for CVE-2026-17106, a tar-extraction path-traversal bug.
• Podman Desktop 1.29.1 is a small patch fixing the arm64 Windows installer, following 1.29.0's dependency updates and accessibility improvements.
• Astro 7.1.6 fixes concurrent static builds failing to generate i18n rewrite fallbacks for dynamic routes, plus stale dev CSS after editing component style blocks.
• Cloudflare detailed migrating cdnjs (9 billion requests/day) fully onto its own Developer Platform — Workers, Workflows, R2, KV, Queues, and Durable Objects — and says the exercise led it to raise Workflows and Workers platform limits for all users.
• BullMQ followed Monday's breaking v6.0.0 (pluggable queue backends, plus new PHP/Python/Elixir implementations) with patch releases v6.0.1–v6.0.3, fixing packaging bugs and bumping the Redis dependency to v7.4.1.

Still Fresh From This Week

Two stories from the last two editions remain highly relevant if you haven't patched yet: Node.js's coordinated release fixing 11 CVEs across the 22.x, 24.x, and 26.x lines (including a heap-use-after-free in the HTTP/2 implementation), and Nuxt's fix for a server-side RCE reachable through runtime template injection in server island props. Neither had a newer patch as of this edition.