CLSA-2026-1793201948: TuxCare security update for org.springframework.data:spring-data-keyvalue (1 CVE)

The fix is included in org.springframework.data:spring-data-keyvalue version 2.3.5.RELEASE-tuxcare.1.

Published Oct 28, 2026

Updated

TuxCare rebuilt org.springframework.data:spring-data-keyvalue to address 1 CVE. Fixed in 2.3.5.RELEASE-tuxcare.1.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.data:spring-data-keyvalue>=2.3.5.RELEASE<2.3.5.RELEASE-tuxcare.1

2.3.5.RELEASE-tuxcare.1

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.data:spring-data-keyvalue to a version that resolves this vulnerability.
Fixed in 2.3.5.RELEASE-tuxcare.1
Upgrade
Upgrade org.springframework.data:spring-data-keyvalue to a version that resolves this vulnerability.
Fixed in 2.3.5.RELEASE-tuxcare.1

Oct 28, 2026

Advisory Published

via OSV·03:39 PM

Data Sourced

via OSV·03:39 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The fix is included in org.springframework.data:spring-data-keyvalue version 2.3.5.RELEASE-tuxcare.1.