Threats Tagged 'ghsa-h7q9-2m8q-h4jr'

CVE-2026-59275 is a deserialization vulnerability in Spring AMQP that allows a single malicious AMQP message to cause the entire consumer JVM to terminate via System.exit(99), resulting in complete availability loss for all workloads running in that process. It affects multiple versions of Spring AMQP, including 4.1.0, 4.0.0 through 4.0.4, 3.2.0 through 3.2.12, and 2.4.18 and earlier. The vulnerability is classified under CWE-502 (Deserialization of Untrusted Data).