{
  "@id": "urn:uuid:24dd0600-73ed-4f0c-9f49-24b6e0d75aa0",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 1,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-08T22:14:44.946698+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.5-tuxcare.2",
          "identifiers": {
            "purl": "pkg:maven/org.springframework.amqp/spring-rabbit-junit@2.4.5-tuxcare.2"
          }
        }
      ],
      "timestamp": "2026-11-08T22:14:44.946698+00:00",
      "status_notes": "Vulnerability CVE-2026-59271 does not affect version 2.4.5-tuxcare.2 of org.springframework.amqp:spring-rabbit-junit. not_affected \u2014 Version 2.4.5 is not affected by CVE-2026-59271. The vulnerable code pattern (password concatenated into BrokerNotAliveException message) was introduced in commit 7ddee2113 (Oct 14, 2022) and first appeared in version 3.0.0. Version 2.4.5 uses the older com.rabbitmq.http.client.Client library with a hardcoded exception message that never includes the admin password. No code path in 2.4.5 connec...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-59271"
      },
      "impact_statement": "not_affected \u2014 Version 2.4.5 is not affected by CVE-2026-59271. The vulnerable code pattern (password concatenated into BrokerNotAliveException message) was introduced in commit 7ddee2113 (Oct 14, 2022) and first appeared in version 3.0.0. Version 2.4.5 uses the older com.rabbitmq.http.client.Client library with a hardcoded exception message that never includes the admin password. No code path in 2.4.5 connec..."
    }
  ]
}