CLSA-2026-1794185565: TuxCare security update for org.springframework.security:spring-security-oauth2-jose (1 CVE)

The issue is fixed in org.springframework.security:spring-security-oauth2-jose version 6.3.10-tuxcare.23.

Published Nov 9, 2026

Updated

TuxCare rebuilt org.springframework.security:spring-security-oauth2-jose to address 1 CVE. Fixed in 6.3.10-tuxcare.23.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework.security:spring-security-oauth2-jose>=6.3.10<6.3.10-tuxcare.23

6.3.10-tuxcare.23

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework.security:spring-security-oauth2-jose to a version that resolves this vulnerability.
Fixed in 6.3.10-tuxcare.23
Upgrade
Upgrade org.springframework.security:spring-security-oauth2-jose to a version that resolves this vulnerability.
Fixed in 6.3.10-tuxcare.23

Nov 9, 2026

Advisory Published

via OSV·01:52 AM

Data Sourced

via OSV·01:52 AM

DescriptionAffected Software

Contains the following vulnerabilities.

The issue is fixed in org.springframework.security:spring-security-oauth2-jose version 6.3.10-tuxcare.23.