CLSA-2026-1793283637: TuxCare security update for org.springframework.cloud (7 CVEs)
Published Oct 29, 2026
·Updated
TuxCare rebuilt 2 org.springframework.cloud packages to address 7 CVEs. Fixed in 4.2.4-tuxcare.1.
Affected Software
2 affected componentsFixes available
tuxcare/org.springframework.cloud:spring-cloud-config-monitor>=4.2.4<4.2.4-tuxcare.1
4.2.4-tuxcare.1
tuxcare/org.springframework.cloud:spring-cloud-config-server>=4.2.4<4.2.4-tuxcare.1
4.2.4-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework.cloud:spring-cloud-config-monitorto a version that resolves this vulnerability.Fixed in 4.2.4-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.springframework.cloud:spring-cloud-config-serverto a version that resolves this vulnerability.Fixed in 4.2.4-tuxcare.1 - Upgrade
Upgrade
org.springframework.cloudto a version that resolves this vulnerability.Fixed in 4.2.4-tuxcare.1
Event History
Oct 29, 2026
Advisory Published
via OSV·03:20 PM
Data Sourced
via OSV·03:20 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.