CLSA-2026-1793902842: TuxCare security update for org.springframework (3 CVEs)
Published Nov 5, 2026
·Updated
TuxCare rebuilt 3 org.springframework packages to address 3 CVEs. Fixed in 5.1.20.RELEASE-tuxcare.8.
Affected Software
3 affected componentsFixes available
tuxcare/org.springframework:spring-expression>=5.1.20.RELEASE<5.1.20.RELEASE-tuxcare.8
5.1.20.RELEASE-tuxcare.8
tuxcare/org.springframework:spring-web>=5.1.20.RELEASE<5.1.20.RELEASE-tuxcare.8
5.1.20.RELEASE-tuxcare.8
tuxcare/org.springframework:spring-webmvc>=5.1.20.RELEASE<5.1.20.RELEASE-tuxcare.8
5.1.20.RELEASE-tuxcare.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework:spring-expressionto a version that resolves this vulnerability.Fixed in 5.1.20.RELEASE-tuxcare.8 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webto a version that resolves this vulnerability.Fixed in 5.1.20.RELEASE-tuxcare.8 - Upgrade
Upgrade
tuxcare/org.springframework:spring-webmvcto a version that resolves this vulnerability.Fixed in 5.1.20.RELEASE-tuxcare.8 - Upgrade
Upgrade
org.springframeworkto a version that resolves this vulnerability.Fixed in 5.1.20.RELEASE-tuxcare.8
Event History
Nov 5, 2026
Advisory Published
via OSV·07:20 PM
Data Sourced
via OSV·07:20 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.