{
  "@id": "urn:uuid:7a2535d1-ed4a-462c-bae3-eeae9c250c6b",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-04T08:48:00.040166+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.8-tuxcare.1",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.8-tuxcare.1"
          }
        }
      ],
      "timestamp": "2026-11-04T08:48:00.040166+00:00",
      "status_notes": "Vulnerability CVE-2026-59271 does not affect version 2.4.8-tuxcare.1 of org.springframework.amqp:spring-rabbit-junit. not_affected \u2014 Version 2.4.8 is not affected by CVE-2026-59271. The vulnerability (admin password embedded in exception messages) exists in versions 3.x where alivenessTest() throws BrokerNotAliveException with dynamic diagnostic information including the password. In version 2.4.8, the code architecture is completely different: alivenessTest() returns a boolean, and the exception is thrown elsewhere with a h...",
      "justification": "vulnerable_code_not_in_execute_path",
      "vulnerability": {
        "name": "CVE-2026-59271"
      },
      "impact_statement": "not_affected \u2014 Version 2.4.8 is not affected by CVE-2026-59271. The vulnerability (admin password embedded in exception messages) exists in versions 3.x where alivenessTest() throws BrokerNotAliveException with dynamic diagnostic information including the password. In version 2.4.8, the code architecture is completely different: alivenessTest() returns a boolean, and the exception is thrown elsewhere with a h..."
    }
  ]
}