HeroDevs
Visit NES for Spring Home Page

Spring AMQP 2.3.x Release Notes

3 versions

Comprehensive release notes and changelog for Spring AMQP 2.3.x, including security patches, bug fixes, and feature updates across all supported versions.

Apr 23, 2026
Latest: 2.3.19
1 Patched Vulnerability
VEX Statements

April 2026

2.3.19

Released Apr 23, 2026
CVE-2023-34050
Full Version: 
2.3.16-spring-amqp-2.3.19

Bug Fixes

  • This patches the Java deserialization vulnerability in Spring AMQP (CVE-2023-34050). SerializationUtils.checkAllowedList(...) no longer permits deserialization when no allowed class name patterns are configured, and throws a SecurityException instead.

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.51
  • Spring Retry (NES) 1.3.4-spring-retry-1.3.11

March 2026

2.3.18

Released Mar 25, 2026
Full Version: 
2.3.16-spring-amqp-2.3.18

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.50
  • Spring Retry (NES) 1.3.4-spring-retry-1.3.10

2.3.17

Released Mar 11, 2026
Full Version: 
2.3.16-spring-amqp-2.3.17

Notes

  • This release originates from the open‑source Spring AMQP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring AMQP 2.3.16.

Dependency Upgrades

  • Spring Framework (NES) 5.3.39-spring-framework-5.3.49
  • Spring Retry (NES) 1.3.4-spring-retry-1.3.9

Stay in the loop

~/herodevs-spring-framework-support

Open Source Support

When official support ends, we're just getting started.