Visit NES for Spring Home Page
Spring AMQP 3.1.x Release Notes
8 versions
Comprehensive release notes and changelog for Spring AMQP 3.1.x, including security patches, bug fixes, and feature updates across all supported versions.
August 2026
3.1.20
Released Aug 28, 2026 Full Version:
3.1.12-spring-amqp-3.1.20
Security Fixes
- A deeply nested object array can no longer bypass the
SerializationUtilsdeserialization allow-list, which now checks an array's ultimate component type instead of allowing every array, and a resultingStackOverflowErrorno longer makes the listener container's default error handler exit the JVM (medium severity, CVE-2026-59275). - A failed RabbitMQ management aliveness check no longer includes the configured administrator password in the exception message raised by
BrokerRunningSupport(medium severity, CVE-2026-59271). - A small compressed message can no longer exhaust the consumer heap, because
AbstractDecompressingPostProcessornow bounds how much decompressed body it copies into memory (medium severity, CVE-2026-47860). AmqpAppender.Builderno longer leaves TLS hostname verification disabled when SSL is enabled without an explicitverifyHostnameattribute, because that attribute now defaults totrue(medium severity, CVE-2026-59272).
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.20 - Spring Framework (NES)
6.1.21-spring-framework-6.1.30 - Spring Retry (NES)
2.0.13-spring-retry-2.0.15
June 2026
3.1.19
Released Jun 15, 2026 Full Version:
3.1.12-spring-amqp-3.1.19
Security Fixes
- Switched
RabbitTemplate.sendAndReceive()reply correlation IDs from a predictableAtomicIntegerto a UUID, preventing an attacker on a shared reply queue from poisoning or stealing replies destined for another caller (CVE-2026-41701). - Fixed
RabbitConnectionFactoryBeanto enable SSL automatically when anamqps://URI is configured, so TLS connections are no longer silently established without certificate or hostname verification (CVE-2026-41714).
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.19 - Spring Framework (NES)
6.1.21-spring-framework-6.1.28
April 2026
3.1.18
Released Apr 23, 2026 Full Version:
3.1.12-spring-amqp-3.1.18
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.18 - Spring Framework (NES)
6.1.21-spring-framework-6.1.27
March 2026
3.1.17
Released Mar 25, 2026 Full Version:
3.1.12-spring-amqp-3.1.17
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.17 - Spring Framework (NES)
6.1.21-spring-framework-6.1.26
October 2025
3.1.16
Released Oct 24, 2025 Full Version:
3.1.12-spring-amqp-3.1.16
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.16 - Spring Framework (NES)
6.1.21-spring-framework-6.1.25
September 2025
3.1.15
Released Sep 23, 2025 Full Version:
3.1.12-spring-amqp-3.1.15
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.15 - Spring Framework (NES)
6.1.21-spring-framework-6.1.24
August 2025
3.1.14
Released Aug 22, 2025 Full Version:
3.1.12-spring-amqp-3.1.14
Dependency Upgrades
- Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.14 - Spring Framework (NES)
6.1.21-spring-framework-6.1.23
July 2025
3.1.13
Released Jul 15, 2025 Full Version:
3.1.12-spring-amqp-3.1.13
Notes
- This release originates from the open‑source Spring AMQP repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring AMQP
3.1.12.
Dependency Upgrades
- Spring Framework (NES)
6.1.21-spring-framework-6.1.22 - Spring Data BOM (NES)
2023.1.12-spring-data-bom-2023.1.13Full Version:3.1.12-spring-amqp-3.1.13
Stay in the loop
~/herodevs-spring-framework-support
herodevs@nes:open-source$ ./display-support-info.sh