CLSA-2026-1794229858: TuxCare security update for org.springframework.cloud (3 CVEs)
Published Nov 9, 2026
·Updated
TuxCare rebuilt 3 org.springframework.cloud packages to address 3 CVEs. Fixed in 3.0.9.RELEASE-tuxcare.1.
Affected Software
3 affected componentsFixes available
tuxcare/org.springframework.cloud:spring-cloud-function-context>=3.0.9.RELEASE<3.0.9.RELEASE-tuxcare.1
3.0.9.RELEASE-tuxcare.1
tuxcare/org.springframework.cloud:spring-cloud-function-parent>=3.0.9.RELEASE<3.0.9.RELEASE-tuxcare.1
3.0.9.RELEASE-tuxcare.1
tuxcare/org.springframework.cloud:spring-cloud-function-web>=3.0.9.RELEASE<3.0.9.RELEASE-tuxcare.1
3.0.9.RELEASE-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/org.springframework.cloud:spring-cloud-function-contextto a version that resolves this vulnerability.Fixed in 3.0.9.RELEASE-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.springframework.cloud:spring-cloud-function-parentto a version that resolves this vulnerability.Fixed in 3.0.9.RELEASE-tuxcare.1 - Upgrade
Upgrade
tuxcare/org.springframework.cloud:spring-cloud-function-webto a version that resolves this vulnerability.Fixed in 3.0.9.RELEASE-tuxcare.1 - Upgrade
Upgrade
org.springframework.cloudto a version that resolves this vulnerability.Fixed in 3.0.9.RELEASE-tuxcare.1
Event History
Nov 9, 2026
Advisory Published
via OSV·02:10 PM
Data Sourced
via OSV·02:10 PM
DescriptionAffected Software
Child vulnerabilities
Contains the following vulnerabilities.