CVE-2026-59274
Unbounded decompression in UnZipTransformer enables zip-bomb DoS
6.5 Medium
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.42%Up 0.2 points since Aug 27, 2026
What each source reports
CVE List Score used
Unbounded decompression in UnZipTransformer enables zip-bomb DoS
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
- Record
CVE-2026-59274- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-409
- Updated
- 2026-11-02
EUVDEUVD-2026-66848
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
- Record
EUVD-2026-66848- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-jmqv-c2qw-xw7r
The UnZipTransformer does not limit decompressed entry size or entry count when processing...
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
- Record
GHSA-jmqv-c2qw-xw7r- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-409
- Updated
- 2026-11-02
NVD
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
- Record
CVE-2026-59274- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-409
- Updated
- 2026-11-02
OSV
Unbounded decompression in UnZipTransformer enables zip-bomb DoS
The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12
- Record
CVE-2026-59274- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2026-1790097561 No score
TuxCare security update for org.springframework.integration (12 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3.
- Record
CLSA-2026-1790097561- Updated
- 2026-11-02
Show 8 moreShow less
OSVCLSA-2026-1791398579 No score
TuxCare security update for org.springframework.integration (11 CVEs)
TuxCare rebuilt 11 org.springframework.integration packages to address 11 CVEs. Fixed in 6.4.9-tuxcare.2.
- Record
CLSA-2026-1791398579- Updated
- 2026-11-02
OSVCLSA-2026-1791906184 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.10-tuxcare.2.
- Record
CLSA-2026-1791906184- Updated
- 2026-11-02
OSVCLSA-2026-1791922759 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.9-tuxcare.1.
- Record
CLSA-2026-1791922759- Updated
- 2026-11-02
OSVCLSA-2026-1791971283 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.3.10-tuxcare.2.
- Record
CLSA-2026-1791971283- Updated
- 2026-11-02
OSVCLSA-2026-1791973149 No score
TuxCare security update for org.springframework.integration (13 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.3.11-tuxcare.6.
- Record
CLSA-2026-1791973149- Updated
- 2026-11-02
OSVCLSA-2026-1791991950 No score
TuxCare security update for org.springframework.integration (13 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.2.11-tuxcare.2.
- Record
CLSA-2026-1791991950- Updated
- 2026-11-02
OSVCLSA-2026-1792000753 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.2.5-tuxcare.1.
- Record
CLSA-2026-1792000753- Updated
- 2026-11-02
OSVCLSA-2026-1792000791 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.1.
- Record
CLSA-2026-1792000791- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
Show 74 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-59274 is a medium vulnerability (CVSS 6.5) in Spring Integration, published August 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.42%, the 36th percentile. No source names a fixed version.