CLSA-2026-1793616474: TuxCare security update for org.springframework (1 CVE)
Published Nov 2, 2026
·Updated
TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.12.
Affected Software
2 affected componentsFixes available
tuxcare/org.springframework:spring-webflux>=5.2.13.RELEASE<5.2.13.RELEASE-tuxcare.12
5.2.13.RELEASE-tuxcare.12
tuxcare/org.springframework:spring-webmvc>=5.2.13.RELEASE<5.2.13.RELEASE-tuxcare.12
5.2.13.RELEASE-tuxcare.12
Event History
Nov 2, 2026
Advisory Published
via OSV·11:47 AM
Data Sourced
via OSV·11:47 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which components are covered by this update?
The update covers the tuxcare/org.springframework:spring-webflux and tuxcare/org.springframework:spring-webmvc packages.
2
What version contains the fix?
The CVE is fixed in version 5.2.13.RELEASE-tuxcare.12.
3
How many CVEs does this update address?
This update addresses one CVE.