CVE-2026-59320

6.5 Moyenne

Publiée le 27/08/2026 à 22:17 · Modifiée le 31/08/2026 à 19:19 · Analysée par le NVD · Source : security@vmware.com

Description

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Spring AMQP 4.1.0

Traduire en français

Produits concernés

Spring AMQP
Vmware spring advanced message queuing protocol

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	security@vmware.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H`

Faiblesses (CWE)

CWE-772

Références

https://spring.io/security/cve-2026-59320 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories