CLSA-2026-1793892219: TuxCare security update for org.springframework (3 CVEs)

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade tuxcare/org.springframework:spring to a version that resolves this vulnerability.

   Fixed in 5.2.15.RELEASE-tuxcare.4
2. Upgrade

   Upgrade tuxcare/org.springframework:spring-core to a version that resolves this vulnerability.

   Fixed in 5.2.15.RELEASE-tuxcare.4
3. Upgrade

   Upgrade tuxcare/org.springframework:spring-web to a version that resolves this vulnerability.

   Fixed in 5.2.15.RELEASE-tuxcare.4
4. Upgrade

   Upgrade org.springframework to a version that resolves this vulnerability.

   Fixed in 5.2.15.RELEASE-tuxcare.4

Event History

Child vulnerabilities

Contains the following vulnerabilities.

• CVE-2021-22096
• CVE-2024-22243
• CVE-2026-41848