CLSA-2026-1793887410: TuxCare security update for org.springframework.security (1 CVE)

The update rebuilds spring-security-config and spring-security-core packages from org.springframework.security.

The fix is available in version 6.2.8-tuxcare.7.

Published Nov 5, 2026

Updated

TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 6.2.8-tuxcare.7.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework.security:spring-security-config>=6.2.8<6.2.8-tuxcare.7

6.2.8-tuxcare.7

tuxcare/org.springframework.security:spring-security-core>=6.2.8<6.2.8-tuxcare.7

6.2.8-tuxcare.7

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-config to a version that resolves this vulnerability.
Fixed in 6.2.8-tuxcare.7
Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-core to a version that resolves this vulnerability.
Fixed in 6.2.8-tuxcare.7
Upgrade
Upgrade org.springframework.security to a version that resolves this vulnerability.
Fixed in 6.2.8-tuxcare.7

Nov 5, 2026

Advisory Published

via OSV·03:03 PM

Data Sourced

via OSV·03:03 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update rebuilds spring-security-config and spring-security-core packages from org.springframework.security.

The fix is available in version 6.2.8-tuxcare.7.