{"action":"Upgrade org.springframework.amqp:spring-amqp to 3.2.11 (3.x) or 4.0.4 (4.x) or later.","affected":[{"fixed":"4.0.4","introduced":"4.0.0"},{"fixed":"3.2.11","introduced":"3.2.0"},{"introduced":"3.1.0","last_affected":"3.1.15"},{"introduced":"0","last_affected":"2.4.17"}],"component":"org.springframework.amqp:spring-amqp","cve_ids":["CVE-2026-41714"],"ecosystem":"Maven","epss":0.00132,"exploited":false,"fixed_versions":["4.0.4","3.2.11"],"ghsa_id":"GHSA-p8qj-fj6r-w7q9","id":"tcs_01M5N971D27Q56B40902ETTM57","modified_at":"2026-08-12T16:41:04.276553Z","published_at":"2026-06-10T00:31:51Z","references":["https://osv.dev/vulnerability/GHSA-p8qj-fj6r-w7q9","https://nvd.nist.gov/vuln/detail/CVE-2026-41714","https://github.com/spring-projects/spring-amqp","https://github.com/spring-projects/spring-amqp/releases/tag/v3.2.11","https://github.com/spring-projects/spring-amqp/releases/tag/v4.0.4","https://spring.io/security/cve-2026-41714"],"severity":{"label":"medium","score":4},"sources":[{"source":"osv","source_id":"GHSA-p8qj-fj6r-w7q9","url":"https://osv.dev/vulnerability/GHSA-p8qj-fj6r-w7q9"}],"summary":"Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean"}