Medium severity6.5NVD Advisory· Published Aug 27, 2026

CVE-2026-59320

Description

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Spring AMQP 4.1.0

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

RubyGems/Spring Amqpinferred
Range: = 4.1.0
Package: https://rubygems.org/gems/spring-amqp
Spring Projects/AMQPllm-create
Range: <4.1.0

Patches

Vulnerability mechanics

References

spring.io/security/cve-2026-59320nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000