Medium severity6.5NVD Advisory· Published Aug 27, 2026· Updated Aug 31, 2026
CVE-2026-59320
CVE-2026-59320
Description
When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Spring AMQP 4.1.0
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: 4.1.0
Patches
Vulnerability mechanics
References
1- spring.io/security/cve-2026-59320nvdVendor Advisory
News mentions
1- Spring Projects: 25 Vulnerabilities Disclosed, Including Critical Flaws in Framework and GraphQLVypr Intelligence · Aug 27, 2026