CVE-2026-41714

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri"amqps://..." without also calling setUseSSLtrue get TLS encryption with no certificate validation and no hostname verification. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1....

cloud.hedou:abp-spring-boot-starter (>=1.0.0, <=1.0.1), cn.404z:tiny-task-spring-boot-starter (>=1.0.0, <=1.7.0) +455 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (>=2.4.0, <=2.4.17)

org.springframework.amqp:spring-amqp MAVEN version =2.4.0, =1.0.0, =1.0.0, =1.0.1, =1.2.3, =1.2.3, =1.2.3, =1.1.0, =0.0.2, =1.1.2, =1.1.2, =1.1.0, =1.3.0 and more Source cves: CVE-2026-41714 Source advisory: MEND:CVE-2026-41714...

CVE-2026-41714 In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri"amqps://..." without also calling setUseSSLtrue get TLS encryption with no certificate validation and no hostname verification. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1....

CVE-2026-41714 In Spring AMQP the RabbitConnectionFactoryBean.setUri("amqps://...") bypasses secure SSL setup, uses TrustEverythingTrustManager

Applications that configure their broker connection via RabbitConnectionFactoryBean.setUri"amqps://..." without also calling setUseSSLtrue get TLS encryption with no certificate validation and no hostname verification. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1....

cloud.wondrify:grails-rabbit-amqp-plugin (7.0.0), cn.hiapi:hiapi-core-application (1.0.8) +375 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (>=3.2.0, <=3.2.10)

org.springframework.amqp:spring-amqp MAVEN version =3.2.0, =2.0.1, =1.0.1-jdk21, =3.5.5, =3.5.0-jdk17-1.0.0, =0.7.0, =0.7.0, =0.2.0, =0.1.0-beta.1, =0.1.0 - com.buession.cas:cas-server-support-logging 4.0.0 and more Source cves: CVE-2026-41714 Source advisory: MEND:CVE-2026-41714...

cn.structured:structure-audit-application (v2.0.0), cn.structured:structure-audit-infra (v2.0.0) +98 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (>=4.0.0, <=4.0.3)

org.springframework.amqp:spring-amqp MAVEN version =4.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =v2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-41714 Source advisory: MEND:CVE-2026-41714...

CVE-2026-41701 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

CVE-2026-41701 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

CVE-2026-41701

CVE-2026-41701 affects Spring AMQP (RabbitTemplate) where correlation IDs for replies on fixed reply queues are generated by an internal simple counter, making them predictable. This data from NVD/CVE listings confirms the issue affects multiple versions (2.4.0–2.4.17, 3.1.0–3.1.15, 3.2.0–3.2.10,...

CVE-2026-41701

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

CVE-2026-41701 In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

Correlation IDs for replies in the RabbitTemplate.sendAndReceive with the fixed reply queue are predictable due to internal simple counter. Affected versions: Spring AMQP 4.0.0 through 4.0.3; 3.2.0 through 3.2.10; 3.1.0 through 3.1.15; 2.4.0 through 2.4.17...

cloud.wondrify:grails-rabbit-amqp-plugin (7.0.0), cn.hiapi:hiapi-core-application (1.0.8) +375 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (>=3.2.0, <=3.2.10)

org.springframework.amqp:spring-amqp MAVEN version =3.2.0, =2.0.1, =1.0.1-jdk21, =3.5.5, =3.5.0-jdk17-1.0.0, =0.7.0, =0.7.0, =0.2.0, =0.1.0-beta.1, =0.1.0 - com.buession.cas:cas-server-support-logging 4.0.0 and more Source cves: CVE-2026-41701 Source advisory: MEND:CVE-2026-41701...

cve-2026-41701 - MEDIUM - In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues

cve-2026-41701 - MEDIUM - In Spring AMQP sequential correlation IDs enable reply poisoning on fixed reply queues...

PT-2026-48317

Name of the Vulnerable Software and Affected Versions Spring AMQP versions 4.0.0 through 4.0.3 Spring AMQP versions 3.2.0 through 3.2.10 Spring AMQP versions 3.1.0 through 3.1.15 Spring AMQP versions 2.4.0 through 2.4.17 Description Applications that configure their broker connection using the...

CVE-2021-22097

In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString method, will deserialize a body for a message with content type application/x-java-serialized-object. It is possible to construct a malicious java.util.Dictionary object that can cause 100%...

EUVD-2018-0705

Malware in sbrugna...

EUVD-2021-2489

Malware in sbrugna...

EUVD-2022-3851

Malicious code in bioql PyPI...

EUVD-2022-5412

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2021-22095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, the Spring AMQP Message object, in its toString method, will create a new String object from the...