CVE-2016-2173

CVE-2016-2173 (Spring AMQP) affects the Spring AMQP component, where org.springframework.core.serializer.DefaultDeserializer can be abused to achieve remote code execution. The vulnerability is present in Spring AMQP versions prior to 1.5.5. Exploitation involves deserialization of untrusted data...

CVE-2026-41714

Spring AMQP 2.4.x/3.1.x/3.2.x/4.0.x (versions 2.4.0–2.4.17, 3.1.0–3.1.15, 3.2.0–3.2.10, 4.0.0–4.0.3) are affected by CVE-2026-41714. The issue occurs when a broker connection is configured via RabbitConnectionFactoryBean.setUri("amqps://...") without calling setUseSSL(true). This leads to TLS enc...