CLSA-2026-1794182039: TuxCare security update for org.springframework.boot (4 CVEs)
Published Nov 9, 2026
·Updated
TuxCare rebuilt 3 org.springframework.boot packages to address 4 CVEs. Fixed in 2.5.7-tuxcare.1.
Affected Software
3 affected componentsFixes available
tuxcare/org.springframework.boot:spring-boot>=2.5.7<2.5.7-tuxcare.1
2.5.7-tuxcare.1
tuxcare/org.springframework.boot:spring-boot-actuator>=2.5.7<2.5.7-tuxcare.1
2.5.7-tuxcare.1
tuxcare/org.springframework.boot:spring-boot-autoconfigure>=2.5.7<2.5.7-tuxcare.1
2.5.7-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework.boot:spring-bootto a version that resolves this vulnerability.Fixed in 2.5.7-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.springframework.boot:spring-boot-actuatorto a version that resolves this vulnerability.Fixed in 2.5.7-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.springframework.boot:spring-boot-autoconfigureto a version that resolves this vulnerability.Fixed in 2.5.7-tuxcare.1 - Upgrade
Upgrade
org.springframework.bootto a version that resolves this vulnerability.Fixed in 2.5.7-tuxcare.1
Event History
Nov 9, 2026
Advisory Published
via OSV·12:54 AM
Data Sourced
via OSV·12:54 AM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.