An operator who calls JdbcMessageStore.addAllowedPatterns(…) to restrict deserialization receives no protection at all when the store is a Spring-managed bean.
Spring Integration 7.1.0
Spring Integration 7.0.0 – 7.0.5
Spring Integration 6.5.0 – 6.5.10
Spring Integration 6.4.0 – 6.4.12
2026年9月4日
CVE-2026-59307 [HIGH] – An operator who calls JdbcMessageStore.addAllowedPatterns(…) to restrict deserialization
📑 文章目录
