org.springframework.integration:spring-integration-ftp (4.0.1.release), org.springframework.integration:spring-integration-sftp (4.0.1.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.1.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.ahome-it:ahome-tooling-server-core (>=1.0.94-release, <=1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.100-release, <=1.0.109-release) +12 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

org.springframework.integration:spring-integration-ftp (2.2.0.release), org.springframework.integration:spring-integration-sftp (2.2.0.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.0.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.2.1.release), org.springframework.integration:spring-integration-sftp (2.2.1.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.1.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

io.codearte.accurest:messaging-integration (>=1.0.7, <=1.1.1), org.springframework.boot:spring-boot-starter-integration (>=1.3.3.release, <=1.3.5.release) +19 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.5.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - io.codearte.accurest:messaging-integratio...

org.springframework.batch:spring-batch-admin-manager (1.2.0.release), org.springframework.integration:spring-integration-ftp (2.0.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.0.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.2.13.release), org.springframework.integration:spring-integration-sftp (4.2.13.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.13.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.3.22.release), org.springframework.integration:spring-integration-sftp (4.3.22.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.22.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.22.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

cn.herodotus.engine:message-sdk-mqtt (>=3.4.0.0, <=3.4.6.0), cn.herodotus.engine:message-spring-boot-starter (>=3.4.0.0, <=3.4.6.0) +50 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=6.4.0, <=6.4.10)

org.springframework.integration:spring-integration-file MAVEN version =6.4.0, =3.4.0.0, =3.4.0.0, =1.3.0, =2.4.0, =1.9.0, =0.8.0, =10.6.33, =5.1.0, =5.1.0, =5.1.0, =5.1.1 and more Source cves: CVE-2026-40987https://vulners.com/cve/CVE-2026...

org.springframework.integration:spring-integration-ftp (2.1.1.release), org.springframework.integration:spring-integration-sftp (2.1.1.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.1.1.release)

org.springframework.integration:spring-integration-file MAVEN version 2.1.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (3.0.5.release), org.springframework.integration:spring-integration-sftp (3.0.5.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.5.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (3.0.7.release), org.springframework.integration:spring-integration-sftp (3.0.7.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.7.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.0.release), org.springframework.integration:spring-integration-ftp (4.1.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.0.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.2.3.release), org.springframework.integration:spring-integration-sftp (2.2.3.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.3.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.2.4.release), org.springframework.integration:spring-integration-sftp (2.2.4.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.4.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

GHSA-9WXP-W4PX-32VH Spring Boot's Mail Auto-Configuration Does Not Enable SSL Hostname Verification

Spring Boot's Mail auto-configuration does not enable hostname verification. Applications that set the relevant JavaMail property, such as spring.mail.properties.mail.smtp.ssl.checkserveridentity=true, are not affected. Affected versions: Spring Boot 4.0.0 through 4.0.6; 3.5.0 through 3.5.14; 3.4...

org.springframework.boot:spring-boot-starter-integration (1.2.4.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.3.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.4.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.8.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.6.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.8.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.themodernway:themodernway-server-core (>=1.0.19-release, <=1.0.20-release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.2.2.release, <=1.2.3.release) +18 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.10.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.themodernway:themodernway-server-cor...

org.springframework.integration:spring-integration-ftp (4.0.7.release), org.springframework.integration:spring-integration-sftp (4.0.7.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.7.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...