Red Hat Fuse 7/spring-integration-core

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Spring Integration File Support: FTP/SFTP/SMB server can write arbitrary files anywhere on the client filesystemCVE-2026-40987 · GHSA-792X-6VQ6-J8R9	org.springframework.integration:spring-integration-file Red Hat Fuse 7/spring-integration-core	MavenRed Hat	High	Fix reported	2026-08-07
org.springframework.integration/spring-integration-core: Spring Integration: Arbitrary class resolution via `json__TypeId__` headerCVE-2026-47856	Red Hat Fuse 7/spring-integration-core	Red Hat	Medium	No fix reported	Not recorded
org.springframework.integration/spring-integration-core: Spring Integration: Output redirection via predictable temporary directoryCVE-2026-59311	Red Hat Fuse 7/spring-integration-core	Red Hat	Medium	No fix reported	Not recorded
org.springframework.integration/spring-integration-core: Spring Integration: Information disclosure via concurrent ScriptEngine processingCVE-2026-59321	Red Hat Fuse 7/spring-integration-core	Red Hat	Medium	No fix reported	Not recorded
org.springframework.integration/spring-integration-core: Spring Integration: Message header manipulation due to overly permissive parsingCVE-2026-59322	Red Hat Fuse 7/spring-integration-core	Red Hat	Medium	No fix reported	Not recorded
org.springframework.integration/spring-integration-core: Spring Integration: Information disclosure via world-readable metadata fileCVE-2026-59292	Red Hat Fuse 7/spring-integration-core	Red Hat	Low	No fix reported	Not recorded