Spring Spring AMQP
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-59320 | 4.1.0 | In Spring AMQP the link credit never replenished on listener exception path | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-59272 | 4.1.0 ; 4.0.0 – 4.0.4 ; 3.2.0 – 3.2.12 ; … | Log4j2 AmqpAppender disables TLS hostname verification by default | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-59275 | 4.1.0 ; 4.0.0 – 4.0.4 ; 3.2.0 – 3.2.12 ; … | Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler c… | MEDIUM 6.6 | 0.4 % | ||
| CVE-2026-59271 | 4.1.0 ; 4.0.0 – 4.0.4 ; 3.2.0 – 3.2.12 ; … | Admin password disclosed in BrokerNotAliveException message | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-47860 | 4.1.0 ; 4.0.0 – 4.0.4 ; 3.2.0 – 3.2.12 ; … | Unbounded decompression of attacker-supplied compressed message bodies | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-41714 | 4.0.0 – < 4.0.3.1 ; 3.2.0 – < 3.2.10.1 ; 3.1.0 – < 3.1.16 ; … | In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager | MEDIUM 4.0 | 0.1 % | ||
| CVE-2026-41701 | 4.0.0 – < 4.0.3.1 ; 3.2.0 – < 3.2.10.1 ; 3.1.0 – < 3.1.16 ; … | In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues | MEDIUM 4.4 | 0.2 % | ||
| CVE-2023-34050 | 1.0.0 – < 2.4.17 ; 3.0.0 – < 3.0.10 | Spring AMQP Deserialization Vulnerability | MEDIUM 5.0 | 1.8 % |