CLSA-2026-1793727013: TuxCare security update for org.springframework.security:spring-security-web (1 CVE)

Published Nov 3, 2026

Updated

TuxCare rebuilt org.springframework.security:spring-security-web to address 1 CVE. Fixed in 3.2.8.RELEASE-tuxcare.2.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.security:spring-security-web>=3.2.8.RELEASE<3.2.8.RELEASE-tuxcare.2

3.2.8.RELEASE-tuxcare.2

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-web to a version that resolves this vulnerability.
Fixed in 3.2.8.RELEASE-tuxcare.2
Upgrade
Upgrade org.springframework.security:spring-security-web to a version that resolves this vulnerability.
Fixed in 3.2.8.RELEASE-tuxcare.2

Nov 3, 2026

Advisory Published

via OSV·06:30 PM

Data Sourced

via OSV·06:30 PM

DescriptionAffected Software

Contains the following vulnerabilities.