{
  "@id": "urn:uuid:71fd76ea-03bf-4a20-b088-b9fb58b51d02",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 4,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-02T14:58:56.128088+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit@1.7.14.RELEASE-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit@1.7.14.RELEASE-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-10-28T11:16:18.714666+00:00",
      "status_notes": "Vulnerability CVE-2026-59272 does not affect version 1.7.14.RELEASE-tuxcare.1 of org.springframework.amqp:spring-rabbit. not_affected \u2014 Version 1.7.14.RELEASE is not affected by CVE-2026-59272. The Log4j2 AMQP appender in this version does not have SSL/TLS support - the vulnerable code pattern (verifyHostname defaulting to false when useSsl=true) cannot exist because the useSsl configuration option itself is not present. SSL support for the Log4j2 appender was added in commit 09f03c74e (July 2016) as part of the 2.0.x branch an...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-59272"
      },
      "impact_statement": "not_affected \u2014 Version 1.7.14.RELEASE is not affected by CVE-2026-59272. The Log4j2 AMQP appender in this version does not have SSL/TLS support - the vulnerable code pattern (verifyHostname defaulting to false when useSsl=true) cannot exist because the useSsl configuration option itself is not present. SSL support for the Log4j2 appender was added in commit 09f03c74e (July 2016) as part of the 2.0.x branch an..."
    }
  ]
}