Visit NES for Spring Home Page
Spring Integration 6.4.x Release Notes
4 versions
Comprehensive release notes and changelog for Spring Integration 6.4.x, including security patches, bug fixes, and feature updates across all supported versions.
June 2026
6.4.14
Released Jun 15, 2026 Full Version:
6.4.10-spring-integration-6.4.14
Bug Fixes
- Addressed a path-traversal vulnerability in the remote-file inbound synchronizer, where a malicious or compromised FTP/SFTP/SMB server could write attacker-controlled files outside the configured local directory; path validation is now centralized in
FileUtils.newFileInDirectoryIfValid, which rejects..segments and escaping absolute paths (CVE-2026-40987).
Dependency Upgrades
- Spring GraphQL (NES)
1.3.7-spring-graphql-1.3.11 - Spring Security (NES)
6.4.13-spring-security-6.4.17
April 2026
6.4.13
Released Apr 28, 2026 Full Version:
6.4.10-spring-integration-6.4.13
Dependency Upgrades
- Spring GraphQL (NES)
1.3.7-spring-graphql-1.3.10 - Spring Security (NES)
6.4.13-spring-security-6.4.16
March 2026
6.4.12
Released Mar 25, 2026 Full Version:
6.4.10-spring-integration-6.4.12
Dependency Upgrades
- Spring AMQP (NES)
3.2.8-spring-amqp-3.2.10 - Spring GraphQL (NES)
1.3.7-spring-graphql-1.3.9 - Spring Kafka (NES)
3.3.11-spring-kafka-3.3.13 - Spring Security (NES)
6.4.13-spring-security-6.4.15
January 2026
6.4.11
Released Jan 28, 2026 Full Version:
6.4.10-spring-integration-6.4.11
Notes
- This release originates from the open‑source Spring Integration repository forked by HeroDevs. It encompasses modifications implemented by HeroDevs to ensure successful framework builds. This release contains no functional changes from Spring Integration
6.4.10.
Dependency Upgrades
- Spring AMQP (NES)
3.2.8-spring-amqp-3.2.9 - Spring Kafka (NES)
3.3.11-spring-kafka-3.3.12 - Spring Security (NES)
6.4.13-spring-security-6.4.14
Stay in the loop
~/herodevs-spring-framework-support
herodevs@nes:open-source$ ./display-support-info.sh