Skip to content
Spring Amqp vulnerabilities
-
spring amqp, vmware spring advanced message queuing protocol +1 more
In Spring AMQP the link credit never replenished on listener exception path
CVE-2026-59320
6.5 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Log4j2 AmqpAppender disables TLS hostname verification by default
CVE-2026-59272
6.8 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)
CVE-2026-59275
6.6 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Admin password disclosed in BrokerNotAliveException message
CVE-2026-59271
5.3 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Unbounded decompression of attacker-supplied compressed message bodies
CVE-2026-47860
6.5 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager
CVE-2026-41714
Fix available
4.0 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues
CVE-2026-41701
Fix available
4.4 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Spring AMQP Deserialization Vulnerability
CVE-2023-34050
Public exploit
5.0 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Deserialization of Untrusted Data in Spring AMQP
CVE-2021-22095
Fix available
6.5 Medium
-
spring amqp, vmware spring advanced message queuing protocol +1 more
Deserialization of Untrusted Data in Spring AMQP
CVE-2021-22097
Fix available
6.5 Medium
-
pivotal spring amqp, spring amqp, pivotal software spring advanced message queuing protocol +1 more +3 more
TLS validation error
CVE-2018-11087
Fix available
5.9 Medium