15 matches found
CLSA-2026-1791398579 TuxCare security update for org.springframework.integration (11 CVEs)
TuxCare rebuilt 43 org.springframework.integration packages to address 11 CVEs. Fixed in 6.4.9-tuxcare.2...
CLSA-2026-1791228558 TuxCare security update for org.springframework.integration (1 CVE)
TuxCare rebuilt 39 org.springframework.integration packages to address 1 CVE. Fixed in 5.5.20-tuxcare.7...
CLSA-2026-1790875447 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.1...
CLSA-2026-1790097561 TuxCare security update for org.springframework.integration (12 CVEs)
TuxCare rebuilt 43 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3...
ROOT-APP-MAVEN-CVE-2026-40987 CVE-2026-40987 in org.springframework.integration:spring-integration-file - Patched by Root
Root has patched CVE-2026-40987 in the org.springframework.integration:spring-integration-file package for Root:Maven. Multiple fixed versions available...
CLSA-2026-1790050729 TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.19-tuxcare.1...
PT-2026-105292
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.19-tuxcare.1...
PT-2026-105351
TuxCare rebuilt 43 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3...
CLSA-2026-1789669141 TuxCare security update for org.springframework.integration (1 CVE)
TuxCare rebuilt 43 org.springframework.integration packages to address 1 CVE. Fixed in 6.4.9-tuxcare.1...
PT-2026-99746
TuxCare rebuilt 43 org.springframework.integration packages to address 1 CVE. Fixed in 6.4.9-tuxcare.1...
Deserialization Protection Bypass
org.springframework.integration, spring-integration-jdbc is vulnerable to a deserialization protection bypass. The vulnerability is due to JdbcMessageStore.addAllowedPatterns... providing no effective protection when the store is configured as a Spring-managed bean, which allows an attacker to...
Arbitrary File Write
org.springframework.integration, spring-integration-zip is vulnerable to arbitrary file write. The vulnerability is due to improper validation of the filename header when processing messages with ZipResultType.FILE, which allows an attacker to specify an arbitrary filesystem path and cause the...
PT-2026-95206
TuxCare rebuilt 39 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.20-tuxcare.6...