--- title: "In Spring AMQP the link credit never replenished on listener exception path" url: https://daily.dev/posts/in-spring-amqp-the-link-credit-never-replenished-on-listener-exception-path-oomfhzxmh source_url: https://spring.io/security/cve-2026-59320 type: article source: "Spring" published: 2026-08-20T16:42:37.913Z updated: 2026-08-20T16:42:59.507Z tags: ["security", "java", "rabbitmq"] reading_time: 1 upvotes: 1 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # In Spring AMQP the link credit never replenished on listener exception path **[Spring](https://daily.dev/sources/spring)** · 1 min read · 1 upvotes · 0 comments ## Summary A CVE affecting Spring AMQP describes a bug where AMQP link credit is never replenished when a listener exception occurs, which can lead to consumers silently stalling. Broadcom's Spring security advisory page documents the issue, though the fetched content is mostly cookie consent boilerplate rather than the full technical details. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the Spring AMQP CVE about link credit not being replenished after a listener exception? Spring AMQP has a disclosed vulnerability, tracked as CVE-2026-59320, where AMQP link credit is never replenished after a listener throws an exception, which can cause message consumption to stall for affected consumers. The issue is documented on Spring's official security advisory page for the project. _Track disclosures like this on daily.dev to stay ahead of Spring AMQP consumer stalls in production._ ## Similar posts on daily.dev - [Admin password disclosed in BrokerNotAliveException message](https://daily.dev/posts/admin-password-disclosed-in-brokernotaliveexception-message-7bykqsnde) · Spring · 3 upvotes · 0 comments - [CVE-2025-41254: Spring Framework STOMP CSRF Vulnerability](https://daily.dev/posts/cve-2025-41254-spring-framework-stomp-csrf-vulnerability-ttqnteb9o) · Spring · 3 upvotes · 0 comments - [Unbounded decompression of attacker-supplied compressed message bodies](https://daily.dev/posts/unbounded-decompression-of-attacker-supplied-compressed-message-bodies-t6ypckd13) · Spring · 2 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#java](https://daily.dev/tags/java), [#rabbitmq](https://daily.dev/tags/rabbitmq) [View this post on daily.dev](https://daily.dev/posts/in-spring-amqp-the-link-credit-never-replenished-on-listener-exception-path-oomfhzxmh)