- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
Verify to analyze this security profile
As of 10/22/2026, Spring Integration recorded 14 security vulnerabilities in the last 90 days, of which 2 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Spring Integration and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-59324fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunctionCVE-2026-59322EmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeadersCVE-2026-59321Shared JSR-223 ScriptEngine evaluated concurrently without THREADING checkCVE-2026-59311Fixed predictable /tmp/ziptransformer work directory enables symlink pre-creationCVE-2026-59307Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference16 Results | Page 1 of 2