CLSA-2026-1794179083: TuxCare security update for org.springframework.security (2 CVEs)

Published Nov 9, 2026

Updated

TuxCare rebuilt 2 org.springframework.security packages to address 2 CVEs. Fixed in 5.6.7-tuxcare.5.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework.security:spring-security-config>=5.6.7<5.6.7-tuxcare.5

5.6.7-tuxcare.5

tuxcare/org.springframework.security:spring-security-core>=5.6.7<5.6.7-tuxcare.5

5.6.7-tuxcare.5

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-config to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.5
Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-core to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.5
Upgrade
Upgrade org.springframework.security to a version that resolves this vulnerability.
Fixed in 5.6.7-tuxcare.5

Nov 9, 2026

Advisory Published

via OSV·12:04 AM

Data Sourced

via OSV·12:04 AM

DescriptionAffected Software

Contains the following vulnerabilities.