What is GHSA-h7q9-2m8q-h4jr?

GHSA-h7q9-2m8q-h4jr is a security advisory published by GitHub Security Advisories with Medium severity. A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just...

Which CVE IDs does GHSA-h7q9-2m8q-h4jr cover?

GHSA-h7q9-2m8q-h4jr covers the following CVE IDs: CVE-2026-59275. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h7q9-2m8q-h4jr?

GHSA-h7q9-2m8q-h4jr has a CVSS v3 base score of 6.6, published by GitHub Security Advisories.

GHSA-h7q9-2m8q-h4jrMediumCVSS 6.6

A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just...

Vendor

GitHub Security Advisories

Published

August 27, 2026

Last Modified

August 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-59275 →

📋 Description

A single hostile AMQP message can terminate the entire consumer JVM (System.exit(99)), not just the listener thread — full availability loss for every workload co-located in that process. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-59275
https://spring.io/security/cve-2026-59275
https://github.com/advisories/GHSA-h7q9-2m8q-h4jr