CLSA-2026-1794160019: TuxCare security update for org.springframework.security (1 CVE)

The update rebuilds spring-security-config and spring-security-core under tuxcare/org.springframework.security.

The advisory identifies 5.7.12-tuxcare.13 as the fixed version.

Published Nov 8, 2026

Updated

TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.13.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework.security:spring-security-config>=5.7.12<5.7.12-tuxcare.13

5.7.12-tuxcare.13

tuxcare/org.springframework.security:spring-security-core>=5.7.12<5.7.12-tuxcare.13

5.7.12-tuxcare.13

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-config to a version that resolves this vulnerability.
Fixed in 5.7.12-tuxcare.13
Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-core to a version that resolves this vulnerability.
Fixed in 5.7.12-tuxcare.13
Upgrade
Upgrade org.springframework.security to a version that resolves this vulnerability.
Fixed in 5.7.12-tuxcare.13

Nov 8, 2026

Advisory Published

via OSV·06:47 PM

Data Sourced

via OSV·06:47 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The update rebuilds spring-security-config and spring-security-core under tuxcare/org.springframework.security.

The advisory identifies 5.7.12-tuxcare.13 as the fixed version.