cn.herodotus.engine:message-sdk-mqtt (>=3.5.0.0, <=3.5.5.2), cn.herodotus.engine:message-spring-boot-starter (>=3.5.0.0, <=3.5.5.2) +24 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=6.5.0, <=6.5.8)

org.springframework.integration:spring-integration-file MAVEN version =6.5.0, =3.5.0.0, =3.5.0.0, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =11.47.0, =12.91.0 - org.springframework.cloud.fn:spring-aws-s3-common 5.2.0 -...

cn.herodotus.engine:message-sdk-mqtt (>=3.5.0.0, <=3.5.5.2), cn.herodotus.engine:message-spring-boot-starter (>=3.5.0.0, <=3.5.5.2) +24 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=6.5.0, <=6.5.8)

org.springframework.integration:spring-integration-file MAVEN version =6.5.0, =3.5.0.0, =3.5.0.0, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =2.0.0-milestone-06, =11.47.0, =12.91.0 - org.springframework.cloud.fn:spring-aws-s3-common 5.2.0 -...

org.springframework.integration:spring-integration-ftp (4.3.18.release), org.springframework.integration:spring-integration-sftp (4.3.18.release) +13 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.18.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.18.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.ahome-it:ahome-tooling-server-core (>=1.1.2-release, <=1.1.3-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.2-release, <=1.1.3-release) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.0.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

cloud.altemista.fwk.framework:cloud-altemistafwk-documentation (3.1.0.release), cloud.altemista.fwk.integration:cloud-altemistafwk-core-integration-file-conf (>=3.0.0.release, <=3.1.0.release) +112 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=5.0.0.release, <=5.5.20)

org.springframework.integration:spring-integration-file MAVEN version =5.0.0.release, =3.0.0.release, =3.0.0.release, =3.0.0.release, =2.2.1, =1.0.0, =1.2.0, =1.0.5, =1.0.0-release, =2.0.0-rc1, =4.37.0, =4.43.0 - mz.org.selv:selv-v3-fulfillment-extension 1.0.1 and more Source cves:...

org.springframework.integration:spring-integration-ftp (3.0.8.release), org.springframework.integration:spring-integration-sftp (3.0.8.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.8.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.3.24.release), org.springframework.integration:spring-integration-sftp (4.3.24.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.24.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.24.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (3.0.3.release), org.springframework.integration:spring-integration-sftp (3.0.3.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.3.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.clusterra:clusterra-email-sender (>=1.0.13.release, <=1.2.0.release), com.clusterra:clusterra-iam-application (>=1.1.0.release, <=1.2.1.release) +24 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.2.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.clusterra:clusterra-email-sender...

org.springframework.integration:spring-integration-ftp (2.1.6.release), org.springframework.integration:spring-integration-sftp (2.1.6.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.1.6.release)

org.springframework.integration:spring-integration-file MAVEN version 2.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.1.7.release), org.springframework.integration:spring-integration-sftp (4.1.7.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.7.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.3.20.release), org.springframework.integration:spring-integration-sftp (4.3.20.release) +13 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.20.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.20.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

io.awspring.cloud:spring-cloud-aws-starter-integration-s3 (>=4.0.0-rc1, <=4.0.2), org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0, <=13.5.0) +18 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.0.0, <=7.0.4)

org.springframework.integration:spring-integration-file MAVEN version =7.0.0, =4.0.0-rc1, =12.94.0, =13.5.0 - org.springframework.cloud.fn:spring-aws-s3-common 6.0.0 - org.springframework.cloud.fn:spring-file-common 6.0.0 - org.springframework.cloud.fn:spring-file-consumer 6.0.0 -...

com.themodernway:themodernway-server-integration (1.3.8-release), org.springframework.cloud:spring-cloud-dataflow-classic-docs (>=1.6.0.release, <=1.7.4.release) +18 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.17.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.ahome-it:ahome-tooling-server-core (>=1.1.27-release, <=1.1.31-release), com.ahome-it:ahome-tooling-server-hazelcast (1.1.27-release) +6 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

com.themodernway:themodernway-server-integration (>=1.3.6-release, <=1.3.7-release), org.springframework.cloud:spring-cloud-dataflow-server-cloudfoundry (>=1.5.0.release, <=1.5.1.release) +4 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.15.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.15.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release), org.springframework.integration:spring-integration-ftp (4.0.6.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.ahome-it:ahome-tooling-server-core (>=1.1.0-release, <=1.1.1-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.0-release, <=1.1.1-release) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

com.themodernway:themodernway-server-integration (>=1.2.30-release, <=1.3.4-release), org.springframework.integration:spring-integration-ftp (4.3.13.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.13.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.0.9.release), org.springframework.integration:spring-integration-sftp (4.0.9.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.9.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...