org.springframework.boot:spring-boot-starter-integration (1.2.0.release), org.springframework.integration:spring-integration-ftp (4.1.0.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.0.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.2.3.release), org.springframework.integration:spring-integration-sftp (2.2.3.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.3.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.2.4.release), org.springframework.integration:spring-integration-sftp (2.2.4.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.2.4.release)

org.springframework.integration:spring-integration-file MAVEN version 2.2.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.0.6.release), org.springframework.integration:spring-integration-sftp (2.0.6.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.0.6.release)

org.springframework.integration:spring-integration-file MAVEN version 2.0.6.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.cloud:spring-cloud-dataflow-server-local (>=1.5.0.release, <=1.5.2.release), org.springframework.integration:spring-integration-ftp (4.3.16.release) +1 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.16.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

com.ahome-it:ahome-tooling-server-core (>=1.0.83-rc1, <=1.0.93-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.0.88-rc1, <=1.0.99-release) +6 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.5.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

com.ahome-it:ahome-tooling-server-core (>=1.1.4-release, <=1.1.12-release), com.ahome-it:ahome-tooling-server-hazelcast (>=1.1.4-release, <=1.1.12-release) +5 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.1.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: - com.ahome-it:ahome-tooling-server-core...

com.themodernway:themodernway-server-integration (1.3.5-release), org.springframework.cloud:spring-cloud-dataflow-docs (>=1.5.0.release, <=1.5.2.release) +10 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.3.14.release)

org.springframework.integration:spring-integration-file MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (4.2.12.release), org.springframework.integration:spring-integration-sftp (4.2.12.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.2.12.release)

org.springframework.integration:spring-integration-file MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.1.0.release), org.springframework.integration:spring-integration-sftp (2.1.0.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.1.0.release)

org.springframework.integration:spring-integration-file MAVEN version 2.1.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (2.1.5.release), org.springframework.integration:spring-integration-sftp (2.1.5.release) potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (2.1.5.release)

org.springframework.integration:spring-integration-file MAVEN version 2.1.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.boot:spring-boot-starter-integration (1.2.8.release), org.springframework.cloud:spring-cloud-starter-turbine-amqp (1.0.6.release) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (4.1.8.release)

org.springframework.integration:spring-integration-file MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-file and may be impacted: -...

org.springframework.integration:spring-integration-ftp (>=7.1.0-m1, <=7.1.0-rc1), org.springframework.integration:spring-integration-sftp (>=7.1.0-m1, <=7.1.0-rc1) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-file (>=7.1.0-m1, <=7.1.0-rc1)

org.springframework.integration:spring-integration-file MAVEN version =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-m1, =7.1.0-rc1 Source cves: CVE-2026-40987 Source advisory: SNYK:JAVA-ORGSPRINGFRAMEWORKINTEGRATION-17308053...

org.eclipse.dirigible:dirigible-components-engine-ftp (>=12.94.0, <=13.5.0), org.springframework.cloud.fn:spring-ftp-common (6.0.0) +2 more potentially affected by CVE-2026-40987 via org.springframework.integration:spring-integration-ftp (7.0.4)

org.springframework.integration:spring-integration-ftp MAVEN version 7.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.integration:spring-integration-ftp and may be impacted: - org.eclipse.dirigible:dirigible-components-engine-f...