{
  "@id": "urn:uuid:8016b81e-4415-4b77-a69d-08b95b4e1951",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-06T10:50:38.955063+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.6-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.6-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-06T10:50:38.955063+00:00",
      "status_notes": "Vulnerability CVE-2026-59271 does not affect version 2.4.6-tuxcare.2 of org.springframework.amqp:spring-rabbit-junit. not_affected \u2014 Version 2.4.6 is NOT AFFECTED by CVE-2026-59271. The vulnerability involves password disclosure in exception messages during RabbitMQ aliveness check failures. However, the vulnerable code pattern (concatenating admin password into exception messages) was introduced in commit 6e3e24606 on October 11, 2022, as part of migrating from RabbitMQ http-client to Java HttpClient. Version 2.4.6 was rele...",
      "justification": "vulnerable_code_not_in_execute_path",
      "vulnerability": {
        "name": "CVE-2026-59271"
      },
      "impact_statement": "not_affected \u2014 Version 2.4.6 is NOT AFFECTED by CVE-2026-59271. The vulnerability involves password disclosure in exception messages during RabbitMQ aliveness check failures. However, the vulnerable code pattern (concatenating admin password into exception messages) was introduced in commit 6e3e24606 on October 11, 2022, as part of migrating from RabbitMQ http-client to Java HttpClient. Version 2.4.6 was rele..."
    }
  ]
}