org.springframework.integration:spring-integration-file vulnerabilities (Maven)

1 vulnerability.

• org.springframework.integration:spring-integration-file Maven Remote-file synchronizer in Spring Integration writes server-supplied filename under localDirectory without canonicalization CVE-2026-40987 Public exploitFix available 7.1 HighJune 11, 2026