CLSA-2026-1793640360: TuxCare security update for org.springframework (2 CVEs)

The update covers TuxCare builds of org.springframework:spring-webflux and org.springframework:spring-websocket.

The two CVE fixes are included in version 6.2.5-tuxcare.4.

Published Nov 2, 2026

Updated

TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.2.5-tuxcare.4.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework:spring-webflux>=6.2.5<6.2.5-tuxcare.4

6.2.5-tuxcare.4

tuxcare/org.springframework:spring-websocket>=6.2.5<6.2.5-tuxcare.4

6.2.5-tuxcare.4

Nov 2, 2026

Advisory Published

via OSV·06:26 PM

Data Sourced

via OSV·06:26 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update covers TuxCare builds of org.springframework:spring-webflux and org.springframework:spring-websocket.

The two CVE fixes are included in version 6.2.5-tuxcare.4.