Advisories · Technology
Spring AMQP.
Every CVE that names Spring AMQP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
In Spring AMQP the link credit never replenished on listener exception path
- Spring AMQP
- Denial of service
- CVSS 6.8 Medium
Log4j2 AmqpAppender disables TLS hostname verification by default
- Spring AMQP
- Weak cryptography or TLS
- CVSS 6.6 Medium
Remote JVM termination: nested-array Java deserialization bypasses allowlist, triggers StackOverflowError, default JavaLangErrorHandler calls System.exit(99)
- Spring AMQP
- Insecure deserialization
- CVSS 5.3 Medium
Admin password disclosed in BrokerNotAliveException message
- Spring AMQP
- Information disclosure
- CVSS 6.5 Medium
Unbounded decompression of attacker-supplied compressed message bodies
- Spring AMQP
- CVSS 5.0 Medium
Spring AMQP Deserialization Vulnerability
- Spring AMQP