{"action":"Upgrade org.springframework.amqp:spring-amqp to 3.2.11 (3.x) or 4.0.4 (4.x) or later.","affected":[{"fixed":"4.0.4","introduced":"4.0.0"},{"fixed":"3.2.11","introduced":"3.2.0"},{"introduced":"3.1.0","last_affected":"3.1.15"},{"introduced":"0","last_affected":"2.4.17"}],"component":"org.springframework.amqp:spring-amqp","cve_ids":["CVE-2026-41701"],"ecosystem":"Maven","epss":0.00173,"exploited":false,"fixed_versions":["4.0.4","3.2.11"],"ghsa_id":"GHSA-p5f7-rjhp-pxvc","id":"tcs_01M5N96GYPVTDRS2X7AEHPYGDB","modified_at":"2026-08-12T16:41:04.343426Z","published_at":"2026-06-10T00:31:51Z","references":["https://osv.dev/vulnerability/GHSA-p5f7-rjhp-pxvc","https://nvd.nist.gov/vuln/detail/CVE-2026-41701","https://github.com/spring-projects/spring-amqp","https://github.com/spring-projects/spring-amqp/releases/tag/v3.2.11","https://github.com/spring-projects/spring-amqp/releases/tag/v4.0.4","https://spring.io/security/cve-2026-41701"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-p5f7-rjhp-pxvc","url":"https://osv.dev/vulnerability/GHSA-p5f7-rjhp-pxvc"}],"summary":"Spring AMQP Has Predictable Correlation IDs in RabbitTemplate.sendAndReceive() with Fixed Reply Queue"}