CLSA-2026-1793729146: TuxCare security update for org.springframework.security (3 CVEs)

The update covers the TuxCare builds of org.springframework.security:spring-security-core and org.springframework.security:spring-security-web.

The three CVE fixes are included in version 5.6.7-tuxcare.3.

TuxCare rebuilt two packages to address three CVEs.

Published Nov 3, 2026

Updated

TuxCare rebuilt 2 org.springframework.security packages to address 3 CVEs. Fixed in 5.6.7-tuxcare.3.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework.security:spring-security-core>=5.6.7<5.6.7-tuxcare.3

5.6.7-tuxcare.3

tuxcare/org.springframework.security:spring-security-web>=5.6.7<5.6.7-tuxcare.3

5.6.7-tuxcare.3

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-core to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.3
Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-web to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.3
Upgrade
Upgrade org.springframework.security to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.3

Nov 3, 2026

Advisory Published

via OSV·07:05 PM

Data Sourced

via OSV·07:05 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update covers the TuxCare builds of org.springframework.security:spring-security-core and org.springframework.security:spring-security-web.

The three CVE fixes are included in version 5.6.7-tuxcare.3.

TuxCare rebuilt two packages to address three CVEs.