StackRadar

CVE-2026-41714

Medium

Advisory

Published 10 Jun 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

Spring AMQP Core: Missing Certificate and Hostname Verification for amqps URIs in RabbitConnectionFactoryBean

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
spring-amqpmaven2.2.1.RELEASE, 2.2.5.RELEASE, 2.2.10.RELEASE, 2.2.11.RELEASE+14 more3.2.1144
OSV records
GHSA-p8qj-fj6r-w7q9

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
spring-amqp@3.1.7
no fix listed

Open the chart page →

2,784
migrationadeptia-connect-migrationVerified publisher4.8.11 of 1See more

migration adeptia-connect-migration 4.8.1

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
spring-amqp@3.2.9
3.2.11

Open the chart page →

451
geoserver-cloudcamptocamp20.0.55 of 11See more

geoserver-cloud camptocamp2 0.0.5

5 of the 11 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-amqp@2.2.10.RELEASE
no fix listed

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.65 of 11See more

geoserverCloud camptocamp2 0.0.6

5 of the 11 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-amqp@2.2.10.RELEASE
no fix listed

Open the chart page →

84,444
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-amqp@2.2.1.RELEASE
no fix listed

Open the chart page →

19,187
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
reportportal/service-jobs:5.15.299d27d58d6b4
spring-amqp@3.2.10
3.2.11

Open the chart page →

11,869
migrationadeptia-automate-migration5.2.91 of 1See more

migration adeptia-automate-migration 5.2.9

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:5.2.98607f4f29732
spring-amqp@3.2.8
3.2.11

Open the chart page →

395
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-amqp@2.2.1.RELEASE
no fix listed

Open the chart page →

19,745
blackduck-alertblackduck8.4.01 of 4See more

blackduck-alert blackduck 8.4.0

1 of the 4 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
spring-amqp@3.1.12
no fix listed

Open the chart page →

4,292
geoservercamptocamp20.0.35 of 12See more

geoserver camptocamp2 0.0.3

5 of the 12 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-amqp@2.2.10.RELEASE
no fix listed
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-amqp@2.2.10.RELEASE
no fix listed

Open the chart page →

88,335
consumer-helmconsumer-app-helm-chart0.1.01 of 1See more

consumer-helm consumer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
j4ckhunter/consumer:1.00bb7a429e3e75
spring-amqp@2.4.6
no fix listed

Open the chart page →

2,564
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
amartinm82/planner:v2.01184353ff57b
spring-amqp@2.3.1
no fix listed

Open the chart page →

27,550
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
oscarsotosanchez/planner:v1.0730c00a099b8
spring-amqp@2.3.1
no fix listed

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-amqp@2.4.0
no fix listed

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
franrobles8/planner:v3.099985392d63c
spring-amqp@2.3.1
no fix listed

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
molynx/planner:v1441c9f52f092
spring-amqp@2.4.0
no fix listed

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
lourdesmorente/new-planner:1.0.0608745878cdb
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-amqp@2.4.0
no fix listed

Open the chart page →

32,205
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-amqp@2.3.10
no fix listed

Open the chart page →

7,691
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
spring-amqp@2.4.0
no fix listed

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,721
filebot-botluiscajl0.0.111 of 1See more

filebot-bot luiscajl 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-amqp@2.4.1
no fix listed

Open the chart page →

3,679
lavandaluiscajl0.0.1343 of 5See more

lavanda luiscajl 0.0.134

3 of the 5 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-amqp@2.2.11.RELEASE
no fix listed
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-amqp@2.2.11.RELEASE
no fix listed
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-amqp@2.3.6
no fix listed

Open the chart page →

18,248
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
spring-amqp@2.4.0
no fix listed

Open the chart page →

29,588
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,721
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
vlebediantsev/file-system-ms-final:latest10393a89b4a8
spring-amqp@2.4.6
no fix listed

Open the chart page →

5,875
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-amqp@2.4.6
no fix listed

Open the chart page →

6,852
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-amqp@2.2.1.RELEASE
no fix listed

Open the chart page →

19,720
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
spring-amqp@2.4.0
no fix listed

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
slagattollas/planner-practica:latestcecd95e31486
spring-amqp@2.3.1
no fix listed

Open the chart page →

28,484
producer-helmproducer-app-helm-chart0.1.01 of 1See more

producer-helm producer-app-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
j4ckhunter/producer:1.006ba447609b12
spring-amqp@2.4.6
no fix listed

Open the chart page →

2,564
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
reportportal/service-api:5.7.29df41f8fb320
spring-amqp@2.2.5.RELEASE
no fix listed
reportportal/service-jobs:5.7.2dc166c58485a
spring-amqp@2.3.5
no fix listed

Open the chart page →

25,737
retail-store-sample-orders-chartstacksimplifyVerified publisher2.0.01 of 1See more

retail-store-sample-orders-chart stacksimplify 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
spring-amqp@3.2.6
3.2.11

Open the chart page →

1,223
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-amqp@2.4.2
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-41714.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
spring-amqp@2.4.2
no fix listed

Open the chart page →

28,605

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mastercloudapps/planner:v1.2340a950b311b2
spring-amqp@2.4.0
no fix listed
4
codeurjc/planner:v1.0800cf520c245
spring-amqp@2.4.0
no fix listed
3
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
spring-amqp@2.2.10.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
spring-amqp@2.2.10.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
spring-amqp@2.2.10.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
spring-amqp@2.2.10.RELEASE
no fix listed
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
spring-amqp@2.2.10.RELEASE
no fix listed
2
hookiesolutions/webhookie:latest0629694246ba
spring-amqp@2.4.2
no fix listed
2
adagber/planner:v1.0e5c1ed097752
spring-amqp@2.4.0
no fix listed
1
adeptiainc/adeptia-connect-migration:5.2.98607f4f29732
spring-amqp@3.2.8
3.2.11
1
adeptiainc/adeptia-connect-migration:4.8.1f1087da3da0b
spring-amqp@3.2.9
3.2.11
1
amartinm82/planner:v2.01184353ff57b
spring-amqp@2.3.1
no fix listed
1
arturisimo/planner:v1.0fff9de644941
spring-amqp@2.4.0
no fix listed
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
spring-amqp@3.1.12
no fix listed
1
chandanteekinavar/findery-market-order-service:1.00cf52bf5ee9a
spring-amqp@2.3.10
no fix listed
1
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
spring-amqp@2.2.1.RELEASE
no fix listed
1
fjvela/urjc-fjvela-worker:1.0.170cebf67bd66
spring-amqp@2.2.1.RELEASE
no fix listed
1
flowable/flowable-rest:7.1.0b7ae287502cd
spring-amqp@3.1.7
no fix listed
1
franrobles8/planner:v3.099985392d63c
spring-amqp@2.3.1
no fix listed
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
spring-amqp@2.2.10.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
spring-amqp@2.2.10.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
spring-amqp@2.2.10.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
spring-amqp@2.2.10.RELEASE
no fix listed
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
spring-amqp@2.2.10.RELEASE
no fix listed
1
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
spring-amqp@2.4.0
no fix listed
1
hugohg34/planner:0.0.2171f61e8d7e2
spring-amqp@2.4.0
no fix listed
1
j4ckhunter/consumer:1.00bb7a429e3e75
spring-amqp@2.4.6
no fix listed
1
j4ckhunter/producer:1.006ba447609b12
spring-amqp@2.4.6
no fix listed
1
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
spring-amqp@2.2.11.RELEASE
no fix listed
1
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
spring-amqp@2.2.11.RELEASE
no fix listed
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
spring-amqp@2.4.1
no fix listed
1
lavandadelpatio/tmdb:0.0.2f36af885e915
spring-amqp@2.3.6
no fix listed
1
lourdesmorente/new-planner:1.0.0608745878cdb
spring-amqp@2.4.0
no fix listed
1
molynx/planner:v1441c9f52f092
spring-amqp@2.4.0
no fix listed
1
oscarsotosanchez/planner:v1.0730c00a099b8
spring-amqp@2.3.1
no fix listed
1
pcarrascoponce/planner:v1.0981fc482442c
spring-amqp@2.4.0
no fix listed
1
reportportal/service-api:5.7.29df41f8fb320
spring-amqp@2.2.5.RELEASE
no fix listed
1
reportportal/service-jobs:5.15.299d27d58d6b4
spring-amqp@3.2.10
3.2.11
1
reportportal/service-jobs:5.7.2dc166c58485a
spring-amqp@2.3.5
no fix listed
1
slagattollas/planner-practica:latestcecd95e31486
spring-amqp@2.3.1
no fix listed
1
torrespro/mca-worker:2.0.06d3bd305a1ba
spring-amqp@2.2.1.RELEASE
no fix listed
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
spring-amqp@2.4.6
no fix listed
1
vlebediantsev/logic-ms:latestdf8bf38c535b
spring-amqp@2.4.6
no fix listed
1
public.ecr.aws/aws-containers/retail-store-sample-orders:1.3.0e85f034bcf48
spring-amqp@3.2.6
3.2.11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.