{
  "@id": "urn:uuid:43319e79-a741-4235-8cea-507d6acbc209",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-08T16:48:59.432090+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.0.8.RELEASE-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.0.8.RELEASE-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-08T16:48:59.432090+00:00",
      "status_notes": "Vulnerability CVE-2026-59271 does not affect version 2.0.8.RELEASE-tuxcare.2 of org.springframework.amqp:spring-rabbit-junit. not_affected \u2014 Version 2.0.8.RELEASE is not affected by CVE-2026-59271. The vulnerable class BrokerRunningSupport.java does not exist in this version - it was introduced in later versions (3.x series) in May 2020, approximately 18 months after the 2.0.8.RELEASE (October 2018). The equivalent functionality in version 2.0.8.RELEASE uses BrokerRunning.java, which throws an exception with a hardcoded message that...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-59271"
      },
      "impact_statement": "not_affected \u2014 Version 2.0.8.RELEASE is not affected by CVE-2026-59271. The vulnerable class BrokerRunningSupport.java does not exist in this version - it was introduced in later versions (3.x series) in May 2020, approximately 18 months after the 2.0.8.RELEASE (October 2018). The equivalent functionality in version 2.0.8.RELEASE uses BrokerRunning.java, which throws an exception with a hardcoded message that..."
    }
  ]
}