CLSA-2026-1794176371: TuxCare security update for org.springframework.ws:spring-ws-security (1 CVE)

The fix is included in org.springframework.ws:spring-ws-security version 3.1.4-tuxcare.4.

No affected version range or workaround is provided in the advisory data. Updating to 3.1.4-tuxcare.4 is the documented remediation.

Published Nov 8, 2026

Updated

TuxCare rebuilt org.springframework.ws:spring-ws-security to address 1 CVE. Fixed in 3.1.4-tuxcare.4.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.ws:spring-ws-security>=3.1.4<3.1.4-tuxcare.4

3.1.4-tuxcare.4

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.ws:spring-ws-security to a version that resolves this vulnerability.
Fixed in 3.1.4-tuxcare.4
Upgrade
Upgrade org.springframework.ws:spring-ws-security to a version that resolves this vulnerability.
Fixed in 3.1.4-tuxcare.4

Nov 8, 2026

Advisory Published

via OSV·11:19 PM

Data Sourced

via OSV·11:19 PM

DescriptionAffected Software

Contains the following vulnerabilities.

The fix is included in org.springframework.ws:spring-ws-security version 3.1.4-tuxcare.4.

No affected version range or workaround is provided in the advisory data. Updating to 3.1.4-tuxcare.4 is the documented remediation.