Red Hat build of Apache Camel 4 for Quarkus 3/spring-amqp

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply QueueCVE-2026-41701 · GHSA-P5F7-RJHP-PXVC	org.springframework.amqp:spring-amqp Red Hat Fuse 7/spring-amqp	MavenRed Hat	Medium	Fix reported	2026-08-12
Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBeanCVE-2026-41714 · GHSA-P8QJ-FJ6R-W7Q9	org.springframework.amqp:spring-amqp Red Hat Fuse 7/spring-amqp	MavenRed Hat	Medium	Fix reported	2026-08-12
org.springframework.amqp/spring-amqp: Spring AMQP: Denial of Service via unbounded decompression of compressed messagesCVE-2026-47860	Red Hat Fuse 7/spring-amqp Red Hat build of Apache Camel 4 for Quarkus 3/spring-amqp	Red Hat	Medium	No fix reported	Not recorded
org.springframework.amqp/spring-amqp: Spring AMQP: Admin password disclosure via exception messageCVE-2026-59271	Red Hat Fuse 7/spring-amqp Red Hat build of Apache Camel 4 for Quarkus 3/spring-amqp	Red Hat	Medium	No fix reported	Not recorded
org.springframework.amqp/spring-amqp: Spring AMQP: Denial of Service due to link credit exhaustionCVE-2026-59320	Red Hat Fuse 7/spring-amqp Red Hat build of Apache Camel 4 for Quarkus 3/spring-amqp	Red Hat	Medium	No fix reported	Not recorded
org.apache.logging.log4j/log4j-core: org.springframework.amqp/spring-amqp: Log4j2 AMQP Appender: Information disclosure due to disabled TLS hostname verificationCVE-2026-59272	Red Hat AI Inference Server/rhaii/vllm-gaudi-rhel9 Red Hat AI Inference Server/rhaiis/vllm-cuda-rhel9	Red Hat	Medium	No fix reported	Not recorded