CLSA-2026-1793892885: TuxCare security update for org.springframework (2 CVEs)
Published Nov 5, 2026
·Updated
TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 6.0.11-tuxcare.8.
Affected Software
2 affected componentsFixes available
tuxcare/org.springframework:spring-context>=6.0.11<6.0.11-tuxcare.8
6.0.11-tuxcare.8
tuxcare/org.springframework:spring-web>=6.0.11<6.0.11-tuxcare.8
6.0.11-tuxcare.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework:spring-contextto a version that resolves this vulnerability.Fixed in 6.0.11-tuxcare.8 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webto a version that resolves this vulnerability.Fixed in 6.0.11-tuxcare.8 - Upgrade
Upgrade
org.springframeworkto a version that resolves this vulnerability.Fixed in 6.0.11-tuxcare.8
Event History
Nov 5, 2026
Advisory Published
via OSV·04:34 PM
Data Sourced
via OSV·04:34 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which packages need to be updated?
The update applies to tuxcare/org.springframework:spring-context and tuxcare/org.springframework:spring-web. TuxCare rebuilt both packages to address two CVEs.
2
What version contains the fixes?
The fixes are included in version 6.0.11-tuxcare.8.