CLSA-2026-1793898486: TuxCare security update for org.springframework (7 CVEs)
Published Nov 5, 2026
·Updated
TuxCare rebuilt 4 org.springframework packages to address 7 CVEs. Fixed in 5.1.19.RELEASE-tuxcare.4.
Affected Software
4 affected componentsFixes available
tuxcare/org.springframework:spring-expression>=5.1.19.RELEASE<5.1.19.RELEASE-tuxcare.4
5.1.19.RELEASE-tuxcare.4
tuxcare/org.springframework:spring-web>=5.1.19.RELEASE<5.1.19.RELEASE-tuxcare.4
5.1.19.RELEASE-tuxcare.4
tuxcare/org.springframework:spring-webflux>=5.1.19.RELEASE<5.1.19.RELEASE-tuxcare.4
5.1.19.RELEASE-tuxcare.4
tuxcare/org.springframework:spring-webmvc>=5.1.19.RELEASE<5.1.19.RELEASE-tuxcare.4
5.1.19.RELEASE-tuxcare.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework:spring-expressionto a version that resolves this vulnerability.Fixed in 5.1.19.RELEASE-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webto a version that resolves this vulnerability.Fixed in 5.1.19.RELEASE-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webfluxto a version that resolves this vulnerability.Fixed in 5.1.19.RELEASE-tuxcare.4 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webmvcto a version that resolves this vulnerability.Fixed in 5.1.19.RELEASE-tuxcare.4 - Upgrade
Upgrade
org.springframeworkto a version that resolves this vulnerability.Fixed in 5.1.19.RELEASE-tuxcare.4
Event History
Nov 5, 2026
Advisory Published
via OSV·06:08 PM
Data Sourced
via OSV·06:08 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.