CVE-2026-59320
MediumCVSS 6.5Summary
When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Affects Spring AMQP 4.1.0.
Risk Assessment
The risk includes complete halt of message processing, which could lead to application downtime and message loss. This may result in service unavailability and business continuity issues.
Recommendation
It is recommended to upgrade Spring AMQP to a patched version. Also monitor link credit status and implement alerting mechanisms for potential stalls.
Original NVD description (English source)
When a container-level ErrorHandler is configured (the mitigation for finding 221000), each delivery whose processing throws still permanently consumes one link credit. After initialCredits (default 100) failing messages the receiver's credit reaches zero and the broker stops delivering, leaving the listener silently stalled while isRunning() remains true. Spring AMQP 4.1.0