A CVE affecting Spring AMQP describes a bug where AMQP link credit is never replenished when a listener exception occurs, which can lead to consumers silently stalling. Broadcom's Spring security advisory page documents the issue, though the fetched content is mostly cookie consent boilerplate rather than the full technical details.
Questions this post answers
What is the Spring AMQP CVE about link credit not being replenished after a listener exception?
Spring AMQP has a disclosed vulnerability, tracked as CVE-2026-59320, where AMQP link credit is never replenished after a listener throws an exception, which can cause message consumption to stall for affected consumers. The issue is documented on Spring's official security advisory page for the project. Track disclosures like this on daily.dev to stay ahead of Spring AMQP consumer stalls in production.