CLSA-2026-1794181711: TuxCare security update for org.springframework (1 CVE)

The update applies to the TuxCare builds of org.springframework:spring-webflux and org.springframework:spring-webmvc.

The rebuilt packages are fixed in version 5.2.0.RELEASE-tuxcare.10.

Published Nov 9, 2026

Updated

TuxCare rebuilt 2 org.springframework packages to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.10.

Affected Software

2 affected componentsFixes available

tuxcare/org.springframework:spring-webflux>=5.2.0.RELEASE<5.2.0.RELEASE-tuxcare.10

5.2.0.RELEASE-tuxcare.10

tuxcare/org.springframework:spring-webmvc>=5.2.0.RELEASE<5.2.0.RELEASE-tuxcare.10

5.2.0.RELEASE-tuxcare.10

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework:spring-webflux to a version that resolves this vulnerability.
Fixed in 5.2.0.RELEASE-tuxcare.10
Upgrade
Upgrade tuxcare/org.springframework:spring-webmvc to a version that resolves this vulnerability.
Fixed in 5.2.0.RELEASE-tuxcare.10
Upgrade
Upgrade org.springframework to a version that resolves this vulnerability.
Fixed in 5.2.0.RELEASE-tuxcare.10

Nov 9, 2026

Advisory Published

via OSV·12:48 AM

Data Sourced

via OSV·12:48 AM

DescriptionAffected Software

Contains the following vulnerabilities.

The update applies to the TuxCare builds of org.springframework:spring-webflux and org.springframework:spring-webmvc.

The rebuilt packages are fixed in version 5.2.0.RELEASE-tuxcare.10.