Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Spring Integration packages could let attackers exploit flaws
published 15 days ago
Summary
Several Spring Integration libraries have been updated to fix multiple security weaknesses. The updates protect your applications from potential attacks that could compromise data or functionality. Apply the new version (5.4.6‑tuxcare.1) to all affected Spring Integration components as soon as possible.
What to do
- Update springframework org.springframework.integration:spring-integration to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-amqp to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-bom to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-core to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-event to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-feed to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-file to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-ftp to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-gemfire to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-groovy to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-http to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-ip to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-jdbc to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-jms to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-jmx to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-jpa to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-kafka to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-mail to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-mongodb to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-mqtt to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-r2dbc to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-redis to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-rmi to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-rsocket to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-scripting to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-security to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-sftp to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-stomp to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-stream to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-syslog to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-test to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-test-support to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-webflux to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-websocket to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-ws to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-xml to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-xmpp to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-zeromq to version 5.4.6-tuxcare.1.
- Update springframework org.springframework.integration:spring-integration-zookeeper to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-amqp to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-core to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-event to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-feed to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-file to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-ftp to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-gemfire to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-groovy to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-http to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-ip to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-jdbc to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-jms to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-jmx to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-jpa to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-kafka to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-mail to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-mongodb to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-mqtt to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-r2dbc to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-redis to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-rmi to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-rsocket to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-scripting to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-security to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-sftp to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-stomp to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-stream to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-syslog to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-test to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-webflux to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-websocket to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-ws to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-xml to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-xmpp to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-zeromq to version 5.4.6-tuxcare.1.
- Update org.springframework.integration:spring-integration-zookeeper to version 5.4.6-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-amqp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-bom |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-core |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-event |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-feed |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-file |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-ftp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-gemfire |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-groovy |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-http |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-ip |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-jdbc |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-jms |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-jmx |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-jpa |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-kafka |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-mail |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-mongodb |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-mqtt |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-r2dbc |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-redis |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-rmi |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-rsocket |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-scripting |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-security |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-sftp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-stomp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-stream |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-syslog |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-test |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-test-support |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-webflux |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-websocket |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-ws |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-xml |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-xmpp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-zeromq |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | springframework | org.springframework.integration:spring-integration-zookeeper |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-amqp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-core |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-event |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-feed |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-file |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-ftp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-gemfire |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-groovy |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-http |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-ip |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-jdbc |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
Showing 50 of 75. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-jms |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-jmx |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-jpa |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-kafka |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-mail |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-mongodb |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-mqtt |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-r2dbc |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-redis |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-rmi |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-rsocket |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-scripting |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-security |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-sftp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-stomp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-stream |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-syslog |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-test |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-webflux |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-websocket |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-ws |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-xml |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-xmpp |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-zeromq |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
| TuxCare:Maven | – | org.springframework.integration:spring-integration-zookeeper |
>= 5.4.6, < 5.4.6-tuxcare.1 Fix: upgrade to 5.4.6-tuxcare.1
|
Original advisory text
TuxCare security update for org.springframework.integration (10 CVEs)
TuxCare rebuilt 8 org.springframework.integration packages to address 10 CVEs. Fixed in 5.4.6-tuxcare.1.
Timeline
Published20 Oct 2026
Updated2 Nov 2026
First seen20 Oct 2026
Sources
CLSA-2026-1792518040 · OSV
Track software like this
Free during beta