CLSA-2026-1794287511: TuxCare security update for org.springframework:spring-websocket (1 CVE)

Q: How can I verify that the remediation has been applied?

Verify that the deployed org.springframework:spring-websocket package is version 5.2.15.RELEASE-tuxcare.5. TuxCare identifies this release as containing the fix for the addressed CVE.

Published Nov 10, 2026

Updated

TuxCare rebuilt org.springframework:spring-websocket to address 1 CVE. Fixed in 5.2.15.RELEASE-tuxcare.5.

Affected Software

1 affected componentFixes available

tuxcare/org.springframework:spring-websocket>=5.2.15.RELEASE<5.2.15.RELEASE-tuxcare.5

5.2.15.RELEASE-tuxcare.5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade tuxcare/org.springframework:spring-websocket to a version that resolves this vulnerability.
Fixed in 5.2.15.RELEASE-tuxcare.5
Upgrade
Upgrade org.springframework:spring-websocket to a version that resolves this vulnerability.
Fixed in 5.2.15.RELEASE-tuxcare.5

Event History

Nov 10, 2026

Advisory Published

via OSV·06:11 AM

Data Sourced

via OSV·06:11 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2025-41254

Frequently Asked Questions

How can I verify that the remediation has been applied?

Verify that the deployed org.springframework:spring-websocket package is version 5.2.15.RELEASE-tuxcare.5. TuxCare identifies this release as containing the fix for the addressed CVE.