{"id":"CVE-2026-59321","aliases":["CLSA-2026-1790097561","CLSA-2026-1791398579","CLSA-2026-1791906184","CLSA-2026-1791922759","CLSA-2026-1791971283","CLSA-2026-1791973149","CLSA-2026-1791991950","CLSA-2026-1792000753","CLSA-2026-1792000791","CLSA-2026-1792076282","CLSA-2026-1792078443","CLSA-2026-1792085815","CLSA-2026-1792486573","CLSA-2026-1792505988","CLSA-2026-1792508128","CLSA-2026-1792518003","CLSA-2026-1792518040","CLSA-2026-1792688197","EUVD-2026-67202","GHSA-jwww-wmvq-qm8j"],"status":"published","title":"Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","severity":{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00175,"percentile":0.07018,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-362"],"published":"2026-08-27T18:04:49Z","modified":"2026-11-02T19:46:30Z","affected":[{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.10"},{"fixed":"6.4.10-tuxcare.3"}]}],"versions":["6.4.10","6.4.10-tuxcare.1","6.4.10-tuxcare.2"],"bundled":12},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.9"},{"fixed":"6.4.9-tuxcare.2"}]}],"versions":["6.4.9","6.4.9-tuxcare.1"],"bundled":11},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.10"},{"fixed":"6.5.10-tuxcare.2"}]}],"versions":["6.5.10","6.5.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jdbc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.5.9"},{"fixed":"6.5.9-tuxcare.1"}]}],"versions":["6.5.9"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.2"}]}],"versions":["6.3.10","6.3.10-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.11"},{"fixed":"6.3.11-tuxcare.6"}]}],"versions":["6.3.11","6.3.11-tuxcare.1","6.3.11-tuxcare.2","6.3.11-tuxcare.3","6.3.11-tuxcare.4","6.3.11-tuxcare.5"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.11"},{"fixed":"6.2.11-tuxcare.2"}]}],"versions":["6.2.11","6.2.11-tuxcare.1"],"bundled":13},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.5"},{"fixed":"6.2.5-tuxcare.1"}]}],"versions":["6.2.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-zip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.1"}]}],"versions":["6.1.5"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-smb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.9"},{"fixed":"6.0.9-tuxcare.1"}]}],"versions":["6.0.9"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.20"},{"fixed":"5.5.20-tuxcare.8"}]}],"versions":["5.5.20","5.5.20-tuxcare.2","5.5.20-tuxcare.3","5.5.20-tuxcare.4","5.5.20-tuxcare.5","5.5.20-tuxcare.6","5.5.20-tuxcare.7","5.5.20.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.20"},{"fixed":"5.5.20-tuxcare.8"}]}],"versions":["5.5.20","5.5.20-tuxcare.2","5.5.20-tuxcare.3","5.5.20-tuxcare.4","5.5.20-tuxcare.5","5.5.20-tuxcare.6","5.5.20-tuxcare.7","5.5.20.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.20"},{"fixed":"5.5.20-tuxcare.8"}]}],"versions":["5.5.20","5.5.20-tuxcare.2","5.5.20-tuxcare.3","5.5.20-tuxcare.4","5.5.20-tuxcare.5","5.5.20-tuxcare.6","5.5.20-tuxcare.7","5.5.20.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.20"},{"fixed":"5.5.20-tuxcare.8"}]}],"versions":["5.5.20","5.5.20-tuxcare.2","5.5.20-tuxcare.3","5.5.20-tuxcare.4","5.5.20-tuxcare.5","5.5.20-tuxcare.6","5.5.20-tuxcare.7","5.5.20.tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.16"},{"fixed":"5.5.16-tuxcare.2"}]}],"versions":["5.5.16","5.5.16-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.16"},{"fixed":"5.5.16-tuxcare.2"}]}],"versions":["5.5.16","5.5.16-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.16"},{"fixed":"5.5.16-tuxcare.2"}]}],"versions":["5.5.16","5.5.16-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.16"},{"fixed":"5.5.16-tuxcare.2"}]}],"versions":["5.5.16","5.5.16-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.19"},{"fixed":"5.5.19-tuxcare.2"}]}],"versions":["5.5.19","5.5.19-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.19"},{"fixed":"5.5.19-tuxcare.2"}]}],"versions":["5.5.19","5.5.19-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.19"},{"fixed":"5.5.19-tuxcare.2"}]}],"versions":["5.5.19","5.5.19-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.19"},{"fixed":"5.5.19-tuxcare.2"}]}],"versions":["5.5.19","5.5.19-tuxcare.1"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.7.RELEASE"},{"fixed":"5.1.7.RELEASE-tuxcare.1"}]}],"versions":["5.1.7.RELEASE"],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.1.13.RELEASE"},{"fixed":"5.1.13.RELEASE-tuxcare.1"}]}],"versions":["5.1.13.RELEASE"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.5.12"},{"fixed":"5.5.12-tuxcare.1"}]}],"versions":["5.5.12"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ftp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-http","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-jms","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.4.6"},{"fixed":"5.4.6-tuxcare.1"}]}],"versions":["5.4.6"],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2.RELEASE"},{"fixed":"5.3.2.RELEASE-tuxcare.2"}]}],"versions":["5.3.2.RELEASE","5.3.2.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-ip","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2.RELEASE"},{"fixed":"5.3.2.RELEASE-tuxcare.2"}]}],"versions":["5.3.2.RELEASE","5.3.2.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-scripting","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2.RELEASE"},{"fixed":"5.3.2.RELEASE-tuxcare.2"}]}],"versions":["5.3.2.RELEASE","5.3.2.RELEASE-tuxcare.1"],"bundled":4},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.integration:spring-integration-syslog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.3.2.RELEASE"},{"fixed":"5.3.2.RELEASE-tuxcare.2"}]}],"versions":["5.3.2.RELEASE","5.3.2.RELEASE-tuxcare.1"],"bundled":4}],"products":[{"vendor":"spring","product":"spring integration"},{"vendor":"spring by vmware","product":"spring integration"},{"vendor":"vmware","product":"spring_integration"}],"references":[{"url":"https://spring.io/security/cve-2026-59321","tags":["Vendor Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-59321","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jwww-wmvq-qm8j"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/59xxx/CVE-2026-59321.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-59321","title":"Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","status":"published","published":"2026-08-27T18:04:49.035Z","modified":"2026-08-28T22:46:47.321Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:19:58.560602Z"}],"euvd":[{"id":"EUVD-2026-67202","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","status":"published","published":"2026-08-27T18:04:49Z","modified":"2026-08-28T22:46:47Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:01:22.342607Z"}],"ghsa":[{"id":"GHSA-jwww-wmvq-qm8j","title":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR...","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","status":"published","published":"2026-08-27T21:31:50Z","modified":"2026-08-29T00:30:58Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T15:11:08.705354Z"}],"nvd":[{"id":"CVE-2026-59321","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","status":"published","published":"2026-08-27T20:17:58.147Z","modified":"2026-08-31T17:27:25.647Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:12:42.035353Z"}],"osv":[{"id":"CVE-2026-59321","title":"Shared JSR-223 ScriptEngine evaluated concurrently without THREADING check","description":"A single ScriptEngine instance is reused for every message on a script-backed channel. For JSR-223 engines that report THREADING=null (not thread-safe, e.g. the Kotlin kts engine), concurrent message processing can corrupt engine-internal state, potentially leaking one message's payload/headers bindings into another message's script evaluation or throwing spurious exceptions.\nSpring Integration 7.1.0\nSpring Integration 7.0.0 - 7.0.5\nSpring Integration 6.5.0 - 6.5.10\nSpring Integration 6.4.0 - 6.4.12\nSpring Integration 5.5.21 and earlier","status":"published","published":"2026-08-27T18:04:49.035Z","modified":"2026-10-28T02:30:44.601367729Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:12.496548Z"},{"id":"CLSA-2026-1790097561","title":"TuxCare security update for org.springframework.integration (12 CVEs)","description":"TuxCare rebuilt 9 org.springframework.integration packages to address 12 CVEs. Fixed in 6.4.10-tuxcare.3.","status":"published","published":"2026-09-22T17:19:21Z","modified":"2026-11-02T19:46:20.181204571Z","updated_at":"2026-11-02T20:29:27.085992Z"},{"id":"CLSA-2026-1791398579","title":"TuxCare security update for org.springframework.integration (11 CVEs)","description":"TuxCare rebuilt 11 org.springframework.integration packages to address 11 CVEs. Fixed in 6.4.9-tuxcare.2.","status":"published","published":"2026-10-07T18:42:59Z","modified":"2026-11-02T19:46:26.322243263Z","updated_at":"2026-11-02T20:29:17.805906Z"},{"id":"CLSA-2026-1791906184","title":"TuxCare security update for org.springframework.integration (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.10-tuxcare.2.","status":"published","published":"2026-10-13T15:43:04Z","modified":"2026-11-02T19:46:27.319835908Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1791922759","title":"TuxCare security update for org.springframework.integration (14 CVEs)","description":"TuxCare rebuilt 9 org.springframework.integration packages to address 14 CVEs. Fixed in 6.5.9-tuxcare.1.","status":"published","published":"2026-10-13T20:19:19Z","modified":"2026-11-02T19:46:27.283847735Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1791971283","title":"TuxCare security update for org.springframework.integration (14 CVEs)","description":"TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.3.10-tuxcare.2.","status":"published","published":"2026-10-14T09:48:03Z","modified":"2026-11-02T19:46:27.668510263Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1791973149","title":"TuxCare security update for org.springframework.integration (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.3.11-tuxcare.6.","status":"published","published":"2026-10-14T10:19:09Z","modified":"2026-11-02T19:46:27.343011392Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1791991950","title":"TuxCare security update for org.springframework.integration (13 CVEs)","description":"TuxCare rebuilt 8 org.springframework.integration packages to address 13 CVEs. Fixed in 6.2.11-tuxcare.2.","status":"published","published":"2026-10-14T15:32:30Z","modified":"2026-11-02T19:46:28.099502716Z","updated_at":"2026-11-02T20:29:13.152182Z"},{"id":"CLSA-2026-1792000753","title":"TuxCare security update for org.springframework.integration (14 CVEs)","description":"TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.2.5-tuxcare.1.","status":"published","published":"2026-10-14T17:59:13Z","modified":"2026-11-02T19:46:28.399919871Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792000791","title":"TuxCare security update for org.springframework.integration (14 CVEs)","description":"TuxCare rebuilt 10 org.springframework.integration packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.1.","status":"published","published":"2026-10-14T17:59:51Z","modified":"2026-11-02T19:46:28.387646947Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792076282","title":"TuxCare security update for org.springframework.integration (10 CVEs)","description":"TuxCare rebuilt 7 org.springframework.integration packages to address 10 CVEs. Fixed in 6.0.9-tuxcare.1.","status":"published","published":"2026-10-15T14:58:02Z","modified":"2026-11-02T19:46:28.668529257Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792078443","title":"TuxCare security update for org.springframework.integration (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework.integration packages to address 4 CVEs. Fixed in 5.5.20-tuxcare.8.","status":"published","published":"2026-10-15T15:34:03Z","modified":"2026-11-02T19:46:28.607105051Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792085815","title":"TuxCare security update for org.springframework.integration (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.16-tuxcare.2.","status":"published","published":"2026-10-15T17:36:55Z","modified":"2026-11-02T19:46:28.972043116Z","updated_at":"2026-11-02T20:29:06.487335Z"},{"id":"CLSA-2026-1792486573","title":"TuxCare security update for org.springframework.integration (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework.integration packages to address 5 CVEs. Fixed in 5.5.19-tuxcare.2.","status":"published","published":"2026-10-20T08:56:13Z","modified":"2026-11-02T19:46:29.687611747Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792505988","title":"TuxCare security update for org.springframework.integration (8 CVEs)","description":"TuxCare rebuilt 5 org.springframework.integration packages to address 8 CVEs. Fixed in 5.1.7.RELEASE-tuxcare.1.","status":"published","published":"2026-10-20T14:19:48Z","modified":"2026-11-02T19:46:30.120035205Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792508128","title":"TuxCare security update for org.springframework.integration (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.1.13.RELEASE-tuxcare.1.","status":"published","published":"2026-10-20T14:55:28Z","modified":"2026-11-02T19:46:29.666417296Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792518003","title":"TuxCare security update for org.springframework.integration (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.5.12-tuxcare.1.","status":"published","published":"2026-10-20T17:40:03Z","modified":"2026-11-02T19:46:30.130217133Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792518040","title":"TuxCare security update for org.springframework.integration (10 CVEs)","description":"TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.4.6-tuxcare.1.","status":"published","published":"2026-10-20T17:40:40Z","modified":"2026-11-02T19:46:29.59260642Z","updated_at":"2026-11-02T20:28:59.01272Z"},{"id":"CLSA-2026-1792688197","title":"TuxCare security update for org.springframework.integration (4 CVEs)","description":"TuxCare rebuilt 4 org.springframework.integration packages to address 4 CVEs. Fixed in 5.3.2.RELEASE-tuxcare.2.","status":"published","published":"2026-10-22T16:56:37Z","modified":"2026-11-02T19:46:30.67130932Z","updated_at":"2026-11-02T20:28:59.01272Z"}]}}