CVE-2026-59322
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
- Record
CVE-2026-59322- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
EUVDEUVD-2026-67203
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
- Record
EUVD-2026-67203- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-9f64-m822-6qq6
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in...
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
- Record
GHSA-9f64-m822-6qq6- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
NVD
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
- Record
CVE-2026-59322- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Weakness
- CWE-20
- Updated
- 2026-11-02
OSV
EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders
The EmbeddedHeadersJsonMessageMapper defaults to an overly permissive header parsing posture in its constructor. When decodeNativeFormat processes raw byte payloads, it deserializes embedded JSON headers into a plain Map and constructs a GenericMessage with MutableMessageHeaders without sanitizing or filtering untrusted header names by default. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier
- Record
CVE-2026-59322- CVSS 3.1
- 6.3 Medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L - Updated
- 2026-11-02
OSVCLSA-2026-1790097561 No score
TuxCare security update for org.springframework.integration (12 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3.
- Record
CLSA-2026-1790097561- Updated
- 2026-11-02
Show 17 moreShow less
OSVCLSA-2026-1791228558 No score
TuxCare security update for org.springframework.integration:spring-integration-core (1 CVE)
TuxCare rebuilt org.springframework.integration:spring-integration-core to address 1 CVE. Fixed in 5.5.20-tuxcare.7.
- Record
CLSA-2026-1791228558- Updated
- 2026-11-02
OSVCLSA-2026-1791398579 No score
TuxCare security update for org.springframework.integration (11 CVEs)
TuxCare rebuilt 11 org.springframework.integration packages to address 11 CVEs. Fixed in 6.4.9-tuxcare.2.
- Record
CLSA-2026-1791398579- Updated
- 2026-11-02
OSVCLSA-2026-1791906184 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.10-tuxcare.2.
- Record
CLSA-2026-1791906184- Updated
- 2026-11-02
OSVCLSA-2026-1791922759 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.9-tuxcare.1.
- Record
CLSA-2026-1791922759- Updated
- 2026-11-02
OSVCLSA-2026-1791971283 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.3.10-tuxcare.2.
- Record
CLSA-2026-1791971283- Updated
- 2026-11-02
OSVCLSA-2026-1791973149 No score
TuxCare security update for org.springframework.integration (13 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.3.11-tuxcare.6.
- Record
CLSA-2026-1791973149- Updated
- 2026-11-02
OSVCLSA-2026-1791991950 No score
TuxCare security update for org.springframework.integration (13 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.2.11-tuxcare.2.
- Record
CLSA-2026-1791991950- Updated
- 2026-11-02
OSVCLSA-2026-1792000753 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.2.5-tuxcare.1.
- Record
CLSA-2026-1792000753- Updated
- 2026-11-02
OSVCLSA-2026-1792000791 No score
TuxCare security update for org.springframework.integration (14 CVEs)
TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.1.
- Record
CLSA-2026-1792000791- Updated
- 2026-11-02
OSVCLSA-2026-1792076282 No score
TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 7 org.springframework.integration packages to address 10 CVEs. Fixed in 6.0.9-tuxcare.1.
- Record
CLSA-2026-1792076282- Updated
- 2026-11-02
OSVCLSA-2026-1792085815 No score
TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 4 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.2.
- Record
CLSA-2026-1792085815- Updated
- 2026-11-02
OSVCLSA-2026-1792486573 No score
TuxCare security update for org.springframework.integration (5 CVEs)
TuxCare rebuilt 4 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.19-tuxcare.2.
- Record
CLSA-2026-1792486573- Updated
- 2026-11-02
OSVCLSA-2026-1792505988 No score
TuxCare security update for org.springframework.integration (8 CVEs)
TuxCare rebuilt 5 org.springframework.integration packages to address 8 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792505988- Updated
- 2026-11-02
OSVCLSA-2026-1792508128 No score
TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.1.
- Record
CLSA-2026-1792508128- Updated
- 2026-11-02
OSVCLSA-2026-1792518003 No score
TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.5.12-tuxcare.1.
- Record
CLSA-2026-1792518003- Updated
- 2026-11-02
OSVCLSA-2026-1792518040 No score
TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.4.6-tuxcare.1.
- Record
CLSA-2026-1792518040- Updated
- 2026-11-02
OSVCLSA-2026-1792688197 No score
TuxCare security update for org.springframework.integration (4 CVEs)
TuxCare rebuilt 4 org.springframework.integration packages to address 4 CVEs. Fixed in 5.3.2.RELEASE-tuxcare.2.
- Record
CLSA-2026-1792688197- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 12 CVEs |
6.4.10 up to 6.4.10-tuxcare.3, plus listed versions 6.4.10-tuxcare.16.4.10-tuxcare.2 |
6.4.10-tuxcare.3 |
org.springframework.integration:spring-integration-coreTuxCare:Maven |
5.5.20 up to 5.5.20-tuxcare.7, plus listed versions 5.5.20-tuxcare.25.5.20-tuxcare.35.5.20-tuxcare.45.5.20-tuxcare.55.5.20-tuxcare.65.5.20.tuxcare.1 |
5.5.20-tuxcare.7 |
Show 123 moreShow less
| Package | Affected | Fixed |
|---|---|---|
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 11 CVEs |
6.4.9 up to 6.4.9-tuxcare.2, plus listed versions 6.4.9-tuxcare.1 |
6.4.9-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.10 up to 6.5.10-tuxcare.2, plus listed versions 6.5.10-tuxcare.1 |
6.5.10-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-jdbcTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.5.9 up to 6.5.9-tuxcare.1 | 6.5.9-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.3.10 up to 6.3.10-tuxcare.2, plus listed versions 6.3.10-tuxcare.1 |
6.3.10-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 13 CVEs |
6.3.11 up to 6.3.11-tuxcare.6, plus listed versions 6.3.11-tuxcare.16.3.11-tuxcare.26.3.11-tuxcare.36.3.11-tuxcare.46.3.11-tuxcare.5 |
6.3.11-tuxcare.6 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 13 CVEs |
6.2.11 up to 6.2.11-tuxcare.2, plus listed versions 6.2.11-tuxcare.1 |
6.2.11-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.2.5 up to 6.2.5-tuxcare.1 | 6.2.5-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-zipTuxCare:Maven From an advisory covering 14 CVEs |
6.1.5 up to 6.1.5-tuxcare.1 | 6.1.5-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-smbTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 10 CVEs |
6.0.9 up to 6.0.9-tuxcare.1 | 6.0.9-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 5 CVEs |
5.5.16 up to 5.5.16-tuxcare.2, plus listed versions 5.5.16-tuxcare.1 |
5.5.16-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 5 CVEs |
5.5.16 up to 5.5.16-tuxcare.2, plus listed versions 5.5.16-tuxcare.1 |
5.5.16-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 5 CVEs |
5.5.16 up to 5.5.16-tuxcare.2, plus listed versions 5.5.16-tuxcare.1 |
5.5.16-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 5 CVEs |
5.5.16 up to 5.5.16-tuxcare.2, plus listed versions 5.5.16-tuxcare.1 |
5.5.16-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 5 CVEs |
5.5.19 up to 5.5.19-tuxcare.2, plus listed versions 5.5.19-tuxcare.1 |
5.5.19-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 5 CVEs |
5.5.19 up to 5.5.19-tuxcare.2, plus listed versions 5.5.19-tuxcare.1 |
5.5.19-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 5 CVEs |
5.5.19 up to 5.5.19-tuxcare.2, plus listed versions 5.5.19-tuxcare.1 |
5.5.19-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 5 CVEs |
5.5.19 up to 5.5.19-tuxcare.2, plus listed versions 5.5.19-tuxcare.1 |
5.5.19-tuxcare.2 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 8 CVEs |
5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1 | 5.1.7.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 8 CVEs |
5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1 | 5.1.7.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 8 CVEs |
5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1 | 5.1.7.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 8 CVEs |
5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1 | 5.1.7.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 8 CVEs |
5.1.7.RELEASE up to 5.1.7.RELEASE-tuxcare.1 | 5.1.7.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 10 CVEs |
5.1.13.RELEASE up to 5.1.13.RELEASE-tuxcare.1 | 5.1.13.RELEASE-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 10 CVEs |
5.5.12 up to 5.5.12-tuxcare.1 | 5.5.12-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-fileTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-ftpTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-httpTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-jmsTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 10 CVEs |
5.4.6 up to 5.4.6-tuxcare.1 | 5.4.6-tuxcare.1 |
org.springframework.integration:spring-integration-coreTuxCare:Maven From an advisory covering 4 CVEs |
5.3.2.RELEASE up to 5.3.2.RELEASE-tuxcare.2, plus listed versions 5.3.2.RELEASE-tuxcare.1 |
5.3.2.RELEASE-tuxcare.2 |
org.springframework.integration:spring-integration-ipTuxCare:Maven From an advisory covering 4 CVEs |
5.3.2.RELEASE up to 5.3.2.RELEASE-tuxcare.2, plus listed versions 5.3.2.RELEASE-tuxcare.1 |
5.3.2.RELEASE-tuxcare.2 |
org.springframework.integration:spring-integration-scriptingTuxCare:Maven From an advisory covering 4 CVEs |
5.3.2.RELEASE up to 5.3.2.RELEASE-tuxcare.2, plus listed versions 5.3.2.RELEASE-tuxcare.1 |
5.3.2.RELEASE-tuxcare.2 |
org.springframework.integration:spring-integration-syslogTuxCare:Maven From an advisory covering 4 CVEs |
5.3.2.RELEASE up to 5.3.2.RELEASE-tuxcare.2, plus listed versions 5.3.2.RELEASE-tuxcare.1 |
5.3.2.RELEASE-tuxcare.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-59322 is a medium vulnerability (CVSS 6.3) in Spring Integration, published August 27, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 21st percentile. Fixed in org.springframework.integration:spring-integration-core 5.5.20-tuxcare.7.