CLSA-2026-1794181098: TuxCare security update for org.springframework.ws:spring-ws-security (2 CVEs)

The two CVEs are addressed in org.springframework.ws:spring-ws-security version 4.0.16-tuxcare.3.

TuxCare rebuilt the package to address two CVEs.

Published Nov 9, 2026

Updated

TuxCare rebuilt org.springframework.ws:spring-ws-security to address 2 CVEs. Fixed in 4.0.16-tuxcare.3.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.ws:spring-ws-security>=4.0.16<4.0.16-tuxcare.3

4.0.16-tuxcare.3

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.ws:spring-ws-security to a version that resolves this vulnerability.
Fixed in 4.0.16-tuxcare.3
Upgrade
Upgrade org.springframework.ws:spring-ws-security to a version that resolves this vulnerability.
Fixed in 4.0.16-tuxcare.3

Nov 9, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionAffected Software

Contains the following vulnerabilities.

The two CVEs are addressed in org.springframework.ws:spring-ws-security version 4.0.16-tuxcare.3.

TuxCare rebuilt the package to address two CVEs.