org.springframework.amqp:spring-rabbit (1.3.2.release), org.springframework.integration:spring-integration-amqp (4.0.0.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.3.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.3.2.release -...

org.springframework.amqp:spring-rabbit (1.5.7.release), org.springframework.integration:spring-integration-amqp (4.2.13.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.7.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.7.release -...

org.springframework.amqp:spring-rabbit (1.5.7.release), org.springframework.integration:spring-integration-amqp (4.2.13.release) potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.5.7.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.7.release -...

com.github.lodsve:lodsve-amqp (>=2.5.8, <=2.5.9), org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.0.2, <=5.0.10) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.4.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.github.lodsve:lodsve-amqp =2.5.8, =5.0.2, =5.0.10 -...

org.springframework.amqp:spring-rabbit (1.5.0.release), org.springframework.integration:spring-integration-amqp (4.2.0.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.0.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.0.release -...

org.springframework.amqp:spring-rabbit (1.5.1.release), org.springframework.integration:spring-integration-amqp (4.2.1.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.5.1.release)

org.springframework.amqp:spring-amqp MAVEN version 1.5.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.5.1.release -...

org.apereo.cas:cas-server-core-configuration-cloud-amqp (>=5.2.0-rc1, <=5.2.0-rc3), org.springframework.amqp:spring-rabbit (1.6.10.release) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.6.10.release)

org.springframework.amqp:spring-amqp MAVEN version 1.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.apereo.cas:cas-server-core-configuration-cloud-amqp =5.2.0-rc1,...

org.springframework.amqp:spring-rabbit (1.3.2.release), org.springframework.integration:spring-integration-amqp (4.0.0.release) potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.3.2.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - org.springframework.amqp:spring-rabbit 1.3.2.release -...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +3 more potentially affected by CVE-2026-41714 via org.springframework.amqp:spring-amqp (1.3.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =1.1.7.release,...

com.bushidowallet:bushido-address-watcher (>=1.0.0, <=1.0.1), com.bushidowallet:bushido-wallet-service (>=1.0.0, <=1.0.1) +3 more potentially affected by CVE-2026-41701 via org.springframework.amqp:spring-amqp (1.3.6.release)

org.springframework.amqp:spring-amqp MAVEN version 1.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.amqp:spring-amqp and may be impacted: - com.bushidowallet:bushido-address-watcher =1.0.0, =1.0.0, =1.1.7.release,...

org.springframework.integration:spring-integration-ftp (>=7.1.0-m1, <=7.1.0-rc1), org.springframework.integration:spring-integration-sftp (>=7.1.0-m1, <=7.1.0-rc1) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.1.0-m1, <=7.1.0-rc1)

org.springframework.integration:spring-integration-file MAVEN version =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-rc1 Source cves: CVE-2026-40987 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKINTEGRATION-17308053...

Directory Traversal

Overview org.springframework.integration:spring-integration-file is a Spring Integration File Support Affected versions of this package are vulnerable to Directory Traversal via improper validation of file paths received from FTP, SFTP, or SMB servers. A malicious or compromised server can write...

Directory Traversal

Overview org.springframework.integration:spring-integration-ftp is a Affected versions of this package are vulnerable to Directory Traversal. via improper validation of file paths received from FTP, SFTP, or SMB servers. A malicious or compromised server can write arbitrary files outside the...

cve-2026-40987 - HIGH - Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization

cve-2026-40987 - HIGH - Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization...

io.awspring.cloud:spring-cloud-aws-starter-integration-s3 (>=4.0.0-m1, <=4.0.2), org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0, <=13.5.0) +18 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.0.0-m1, <=7.0.4)

org.springframework.integration:spring-integration-file MAVEN version =7.0.0-m1, =4.0.0-m1, =12.94.0, =13.5.0 - org.springframework.cloud.fn:spring-aws-s3-common 6.0.0 - org.springframework.cloud.fn:spring-file-common 6.0.0 - org.springframework.cloud.fn:spring-file-consumer 6.0.0 -...

org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0, <=13.5.0), org.springframework.cloud.fn:spring-ftp-common (6.0.0) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-ftp (7.0.4)

org.springframework.integration:spring-integration-ftp MAVEN version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-ftp and may be impacted: - org.eclipse.dirigible:dirigible-components-engine-f...

com.3pillarglobal.labs:spring-integration-aws (2.0.0), com.auth0:spring-security-auth0 (0.2) +105 more potentially affected by CVE-2026-41846 via org.springframework:spring-webmvc (3.2.8.release)

org.springframework:spring-webmvc MAVEN version 3.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.3pillarglobal.labs:spring-integration-aws 2.0.0 - com.auth0:spring-security-auth0...

org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support (>=2.4.2.release_1, <=2.4.2.release_2), org.springframework.integration:spring-integration-jms (4.2.13.release) +1 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.2.9.release)

org.springframework:spring-jms MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.servicemix.bundles:org.apache.servicemix.bundles.spring-ws-support...

org.apache.camel:camel-itest-spring32 (>=2.17.0, <=2.17.7), org.springframework.integration:spring-integration-jms (3.0.8.release) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.15.release)

org.springframework:spring-jms MAVEN version 3.2.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - org.apache.camel:camel-itest-spring32 =2.17.0, =2.17.7 -...

com.assist4j:assist4j-core (>=1.0.6, <=1.0.52), com.assist4j:assist4j-data (>=1.0.6, <=1.0.52) +8 more potentially affected by CVE-2026-41855 via org.springframework:spring-jms (4.3.15.release)

org.springframework:spring-jms MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.assist4j:assist4j-core =1.0.6, =1.0.6, =1.0.0, =1.0.0, =1.26, =1.26, =1.27 -...