CLSA-2026-1793626139: TuxCare security update for org.springframework (2 CVEs)
Published Nov 2, 2026
·Updated
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.2.0.RELEASE-tuxcare.8.
Affected Software
2 affected componentsFixes available
tuxcare/org.springframework:spring-expression>=5.2.0.RELEASE<5.2.0.RELEASE-tuxcare.8
5.2.0.RELEASE-tuxcare.8
tuxcare/org.springframework:spring-web>=5.2.0.RELEASE<5.2.0.RELEASE-tuxcare.8
5.2.0.RELEASE-tuxcare.8
Event History
Nov 2, 2026
Advisory Published
via OSV·02:29 PM
Data Sourced
via OSV·02:29 PM
DescriptionAffected Software