CLSA-2026-1793187929: TuxCare security update for org.springframework.data (1 CVE)

The update covers tuxcare/org.springframework.data:spring-data-envers and tuxcare/org.springframework.data:spring-data-jpa.

The listed fix is in version 3.2.12-tuxcare.5.

Published Oct 28, 2026

Updated

TuxCare rebuilt 2 org.springframework.data packages to address 1 CVE. Fixed in 3.2.12-tuxcare.5.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework.data:spring-data-envers>=3.2.12<3.2.12-tuxcare.5

3.2.12-tuxcare.5

tuxcare/org.springframework.data:spring-data-jpa>=3.2.12<3.2.12-tuxcare.5

3.2.12-tuxcare.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.data:spring-data-envers to a version that resolves this vulnerability.
Fixed in 3.2.12-tuxcare.5
Upgrade
Upgrade tuxcare/org.springframework.data:spring-data-jpa to a version that resolves this vulnerability.
Fixed in 3.2.12-tuxcare.5
Upgrade
Upgrade org.springframework.data to a version that resolves this vulnerability.
Fixed in 3.2.12-tuxcare.5

Oct 28, 2026

Advisory Published

via OSV·11:45 AM

Data Sourced

via OSV·11:45 AM

DescriptionAffected Software

Contains the following vulnerabilities.

The update covers tuxcare/org.springframework.data:spring-data-envers and tuxcare/org.springframework.data:spring-data-jpa.

The listed fix is in version 3.2.12-tuxcare.5.