CLSA-2026-1793887316: TuxCare security update for org.springframework.kafka:spring-kafka (3 CVEs)

The CVEs are addressed in TuxCare’s rebuilt org.springframework.kafka:spring-kafka version 3.2.10-tuxcare.4.

This update addresses three CVEs in org.springframework.kafka:spring-kafka.

Published Nov 5, 2026

Updated

TuxCare rebuilt org.springframework.kafka:spring-kafka to address 3 CVEs. Fixed in 3.2.10-tuxcare.4.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.kafka:spring-kafka>=3.2.10<3.2.10-tuxcare.4

3.2.10-tuxcare.4

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.kafka:spring-kafka to a version that resolves this vulnerability.
Fixed in 3.2.10-tuxcare.4
Upgrade
Upgrade org.springframework.kafka:spring-kafka to a version that resolves this vulnerability.
Fixed in 3.2.10-tuxcare.4

Nov 5, 2026

Advisory Published

via OSV·03:01 PM

Data Sourced

via OSV·03:01 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The CVEs are addressed in TuxCare’s rebuilt org.springframework.kafka:spring-kafka version 3.2.10-tuxcare.4.

This update addresses three CVEs in org.springframework.kafka:spring-kafka.