com.mozu:mozu-api-jobs (>=1.0.13, <=1.0.23), gradle.plugin.com.atc.gradle.plugins.xd:spring-xd-deploy-plugin (>=0.0.1, <=0.0.8) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.2.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.mozu:mozu-api-jobs =1.0.13, =0.0.1,...

org.springframework.boot:spring-boot-starter-integration (>=1.1.11.release, <=1.1.12.release), org.springframework.integration:spring-integration-ftp (4.0.6.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (>=1.0.0.release, <=1.0.1.release), org.springframework.integration:spring-integration-ftp (3.0.1.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (3.0.1.release)

org.springframework.integration:spring-integration-file MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

mt.edu.um.cs.rv:sample (>=1.0.0, <=1.0.2), org.hspconsortium.bilirubin:hspc-bilirubin-monitor (0.1) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.4.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - mt.edu.um.cs.rv:sample =1.0.0, =0.3, =0.1...

com.ahome-it:ahome-tooling-server-core (>=1.0.94-release, <=1.0.109-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.100-release, <=1.0.109-release) +12 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.6.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

org.springframework.boot:spring-boot-starter-integration (1.2.0.release), org.springframework.integration:spring-integration-ftp (4.1.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.0.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.4.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.3.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.4.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.8.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.6.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.8.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

cl.kanopus.tool:ktool-pulse (>=1.0.0, <=2.1.0), cloud.lildworks.ldu.springboot:ldu-springboot-mail-sender (4.0.6.2606.0) +336 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=4.0.0, <=4.0.6)

org.springframework.boot:spring-boot-starter-mail MAVEN version =4.0.0, =1.0.0, =v2.0.0, =2.83.0, =2.79.0, =2.78.0, =2.71.0, =2.74.0, =3.33.0, =2.70.0, =1.52.0, =5.0.4, =4.8.0-chi-rc, =4.8.2-chi and more Source cves: CVE-2026-40992 Source advisory: GHSA-9WXP-W4PX-32VH...

cc.cloudpivot.starter:cloudpivot-starter-messaging-mail (>=1.0.0, <=1.0.3), cn.net.rjnetwork:social-sdk-xianyu-manager (>=0.0.2, <=0.0.7) +523 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=3.5.0, <=3.5.14)

org.springframework.boot:spring-boot-starter-mail MAVEN version =3.5.0, =1.0.0, =0.0.2, =3.5.5, =0.0.19, =0.0.19, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.12.0 and more Source cves: CVE-2026-40992 Source advisory: OSV:GHSA-9WXP-W4PX-32VH...

cc.cloudpivot.starter:cloudpivot-starter-messaging-mail (>=1.0.0, <=1.0.3), cn.net.rjnetwork:social-sdk-xianyu-manager (>=0.0.2, <=0.0.7) +523 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=3.5.0, <=3.5.14)

org.springframework.boot:spring-boot-starter-mail MAVEN version =3.5.0, =1.0.0, =0.0.2, =3.5.5, =0.0.19, =0.0.19, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.12.0 and more Source cves: CVE-2026-40992 Source advisory: GHSA-9WXP-W4PX-32VH...

ai.intelliswarm:swarmai-eval (>=1.0.0, <=1.0.29), ai.intelliswarm:swarmai-rag (>=1.0.28, <=1.0.29) +472 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=3.4.0, <=3.4.13)

org.springframework.boot:spring-boot-starter-mail MAVEN version =3.4.0, =1.0.0, =1.0.28, =1.0.0, =3.2.5, =5.0.0-beta.4, =1.0.0, =1.0.1-jdk21, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.5 and more Source cves: CVE-2026-40992 Source advisory: GHSA-9WXP-W4PX-32VH...

cl.kanopus.tool:ktool-pulse (>=1.0.0, <=2.1.0), cloud.lildworks.ldu.springboot:ldu-springboot-mail-sender (4.0.6.2606.0) +336 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=4.0.0, <=4.0.6)

org.springframework.boot:spring-boot-starter-mail MAVEN version =4.0.0, =1.0.0, =v2.0.0, =2.83.0, =2.79.0, =2.78.0, =2.71.0, =2.74.0, =3.33.0, =2.70.0, =1.52.0, =5.0.4, =4.8.0-chi-rc, =4.8.2-chi and more Source cves: CVE-2026-40992 Source advisory: OSV:GHSA-9WXP-W4PX-32VH...

ai.intelliswarm:swarmai-eval (>=1.0.0, <=1.0.29), ai.intelliswarm:swarmai-rag (>=1.0.28, <=1.0.29) +472 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=3.4.0, <=3.4.13)

org.springframework.boot:spring-boot-starter-mail MAVEN version =3.4.0, =1.0.0, =1.0.28, =1.0.0, =3.2.5, =5.0.0-beta.4, =1.0.0, =1.0.1-jdk21, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.3, =4.11.5 and more Source cves: CVE-2026-40992 Source advisory: OSV:GHSA-9WXP-W4PX-32...

org.springframework.boot:spring-boot-starter-integration (1.1.10.release), org.springframework.integration:spring-integration-ftp (4.0.5.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.5.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.3.0.release), org.springframework.integration:spring-integration-ftp (4.2.1.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.1.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (>=1.1.7.release, <=1.1.9.release), org.springframework.integration:spring-integration-ftp (4.0.4.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.0.4.release)

org.springframework.integration:spring-integration-file MAVEN version 4.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

cl.kanopus.tool:ktool-pulse (>=1.0.0, <=2.1.0), cloud.lildworks.ldu.springboot:ldu-springboot-mail-sender (4.0.6.2606.0) +336 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=4.0.0, <=4.0.6)

org.springframework.boot:spring-boot-starter-mail MAVEN version =4.0.0, =1.0.0, =v2.0.0, =2.83.0, =2.79.0, =2.78.0, =2.71.0, =2.74.0, =3.33.0, =2.70.0, =1.52.0, =5.0.4, =4.8.0-chi-rc, =4.8.2-chi and more Source cves: CVE-2026-40992 Source advisory: MEND:CVE-2026-40992...

cc.cloudpivot.starter:cloudpivot-starter-messaging-mail (>=1.0.0, <=1.0.3), cn.net.rjnetwork:social-sdk-xianyu-manager (>=0.0.2, <=0.0.7) +523 more potentially affected by CVE-2026-40992 via org.springframework.boot:spring-boot-starter-mail (>=3.5.0, <=3.5.14)

org.springframework.boot:spring-boot-starter-mail MAVEN version =3.5.0, =1.0.0, =0.0.2, =3.5.5, =0.0.19, =0.0.19, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.11.6, =4.12.0 and more Source cves: CVE-2026-40992 Source advisory: MEND:CVE-2026-40992...

com.github.paulcwarren:content-rest-spring-boot-starter (>=0.0.9, <=0.0.11), com.github.paulcwarren:spring-content-rest (>=0.0.9, <=0.0.11) +7 more potentially affected by CVE-2026-41837 via org.springframework.data:spring-data-rest-core (2.6.10.release)

org.springframework.data:spring-data-rest-core MAVEN version 2.6.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-rest-core and may be impacted: - com.github.paulcwarren:content-rest-spring-boot-starter...