com.rabbitmq.jms:rabbitmq-jms (1.10.0), com.smoketurner.dropwizard:zipkin-core (1.3.7-1) +8 more potentially affected by CVE-2026-69220 via com.rabbitmq:amqp-client (4.8.1)

com.rabbitmq:amqp-client MAVEN version 4.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.rabbitmq.jms:rabbitmq-jms 1.10.0 - com.smoketurner.dropwizard:zipkin-core 1.3.7-1 -...

org.springframework.boot:spring-boot-starter-integration (1.2.8.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.6.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.8.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.4.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.3.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.4.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

io.zipkin.brave:brave-instrumentation-spring-rabbit (>=5.4.3, <=5.5.1), org.springframework.amqp:spring-rabbit (1.7.10.release) +5 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.7.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.7.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - io.zipkin.brave:brave-instrumentation-spring-rabbit =5.4.3, =5.5.1 -...