https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-59320.htmlhttps://patchthecve.com/cve/CVE-2026-59320.htmlMon, 31 Aug 2026 17:19:34 +0000MEDIUM 6.5: When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving thehttps://patchthecve.com/cve/CVE-2026-59272.htmlhttps://patchthecve.com/cve/CVE-2026-59272.htmlTue, 01 Sep 2026 15:50:45 +0000MEDIUM 6.8: Any application shipping logs to RabbitMQ over TLS via the Log4j2 appender, relying on the documented default, is exposed to man-in-the-middle interception of every log event. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlierhttps://patchthecve.com/cve/CVE-2026-59275.htmlhttps://patchthecve.com/cve/CVE-2026-59275.htmlTue, 01 Sep 2026 18:22:14 +0000MEDIUM 6.6: A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlierhttps://patchthecve.com/cve/CVE-2026-59271.htmlhttps://patchthecve.com/cve/CVE-2026-59271.htmlTue, 01 Sep 2026 18:29:11 +0000MEDIUM 5.3: When the RabbitMQ management aliveness check fails, the configured admin password is embedded in cleartext in the thrown exception message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlierhttps://patchthecve.com/cve/CVE-2026-47860.htmlhttps://patchthecve.com/cve/CVE-2026-47860.htmlWed, 02 Sep 2026 16:37:03 +0000MEDIUM 6.5: An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single ~1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier