CLSA-2026-1793888140: TuxCare security update for org.springframework.kafka:spring-kafka (1 CVE)

The update fixes the reported CVE in org.springframework.kafka:spring-kafka version 2.9.13-tuxcare.3.

Published Nov 5, 2026

Updated

TuxCare rebuilt org.springframework.kafka:spring-kafka to address 1 CVE. Fixed in 2.9.13-tuxcare.3.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.kafka:spring-kafka>=2.9.13<2.9.13-tuxcare.3

2.9.13-tuxcare.3

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.kafka:spring-kafka to a version that resolves this vulnerability.
Fixed in 2.9.13-tuxcare.3
Upgrade
Upgrade org.springframework.kafka:spring-kafka to a version that resolves this vulnerability.
Fixed in 2.9.13-tuxcare.3

Nov 5, 2026

Advisory Published

via OSV·03:15 PM

Data Sourced

via OSV·03:15 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update fixes the reported CVE in org.springframework.kafka:spring-kafka version 2.9.13-tuxcare.3.