Spring Spring AMQP

• CVE-2026-59320 Medium 6.5 In Spring AMQP the link credit never replenished on listener exception path 0.4%
• CVE-2026-59272 Medium 6.8 Log4j2 AmqpAppender disables TLS hostname verification by default 0.3%
• CVE-2026-59275 Medium 6.6 Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99) 0.4%
• CVE-2026-59271 Medium 5.3 Admin password disclosed in BrokerNotAliveException message 0.3%
• CVE-2026-47860 Medium 6.5 Unbounded decompression of attacker-supplied compressed message bodies 0.4%
• CVE-2026-41714 Medium 4.0 In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager 0.1%
• CVE-2026-41701 Medium 4.4 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues 0.2%
• CVE-2023-34050 Medium 5.0 Spring AMQP Deserialization Vulnerability 1.8%