CVE-2026-59274 - The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 - 漏洞详情

漏洞编号：CVE-2026-59274

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-59274

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-409

发布/更新时间：2026-08-27 / 2026-08-28

漏洞描述

The UnZipTransformer does not limit decompressed entry size or entry count when processing archives. Consequently, an attacker can send a zip archive that can exhaust JVM heap memory, causing a denial-of-service outage.
Spring Integration 7.1.0
Spring Integration 7.0.0 - 7.0.5
Spring Integration 6.5.0 - 6.5.10
Spring Integration 6.4.0 - 6.4.12

漏洞描述

相关链接

相关漏洞