Spring AMQP — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Spring AMQP, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-59320	In Spring AMQP the link credit never replenished on listener exception path	6.5	Medium	2026-08-27
CVE-2026-59272	Log4j2 AmqpAppender disables TLS hostname verification by default	6.8	Medium	2026-08-27
CVE-2026-59275	Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)	6.6	Medium	2026-08-27
CVE-2026-59271	Admin password disclosed in BrokerNotAliveException message	5.3	Medium	2026-08-27
CVE-2026-47860	Unbounded decompression of attacker-supplied compressed message bodies	6.5	Medium	2026-08-26
CVE-2026-41714	In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager CWE-295	4.0	Medium	2026-06-09
CVE-2026-41701	In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues CWE-330	4.4	Medium	2026-06-09
CVE-2023-34050	Spring AMQP Deserialization Vulnerability	5.0	Medium	2023-10-19
CVE-2021-22095	Spring AMQP 代码问题漏洞 CWE-502	6.5	-	2021-11-30
CVE-2021-22097	Spring AMQP 代码问题漏洞 CWE-502	7.5	-	2021-10-28
CVE-2018-11087	TLS validation error	5.9	-	2018-09-14

All 11 known CVE vulnerabilities affecting Spring AMQP with full Chinese analysis, references, and POCs where available.