Login Request a demo
SI
Product
Spring Integration
by Vmware · last CVE Aug 27, 2026
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities17In the news0Timeline
Severity mix
Critical 3High 3Medium 10Low 1
Severity
All severities17Critical3High3Medium10Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Spring Integration to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59324
8.2
0%
Aug 27
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
Affected: before 5.5.22; 6.4.0 before 6.4.13; 6.5.0 before 6.5.11; 7.0.0 before 7.0.5.1; 7.1.0 before 7.1.0.1
CVE-2026-59307
8.0
0%
Aug 27
Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
Affected: 6.4.0 through 6.4.12; 6.5.0 through 6.5.10; 7.0.0 through 7.0.5; 7.1.0; 7.1.0; 7.1.0; +2 more
CVE-2026-40987
7.1
0%
Jun 11
Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization
Affected: before 5.5.21; 6.3.0 before 6.3.15; 6.4.0 before 6.4.12; 6.5.0 before 6.5.8.1; 7.0.0 before 7.0.4.1
Showing 3