AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

VMwareCVE-2026-59320

VMware Spring AMQP: resource leak

VMware

CVE-2026-59320 · Published Aug 27, 2026 · updated Aug 31, 2026

Medium6.5
No fix yet
VMware advisory

When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true.

Spring AMQP 4.1.0

Affected versions

PackageAffectedFixed in
Spring AMQP
Product
<= 4.1.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-772

More VMware advisories

All VMware
Medium 4.2Aug 27VMware Spring Integration: race conditionCVE-2026-59321no fix yetMedium 6.3Aug 27VMware Spring Integration: improper input validationCVE-2026-59322no fix yetHigh 8.2Aug 27VMware Spring Integration: race conditionCVE-2026-59324no fix yetHigh 8.0Aug 27VMware Spring Integration: unsafe deserializationCVE-2026-59307no fix yetMedium 6.8Aug 27VMware Spring Integration: link followingCVE-2026-59311no fix yetCritical 9.8Aug 27Spring MVC applications using the functional web framework are vulnerable to...CVE-2026-59313no fix yet