CLSA-2026-1777941834

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1777941834.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1777941834
Upstream
CVE (5)
Published
2026-08-04T14:52:30Z
Modified
2026-11-02T19:45:25Z
Summary
TuxCare security update for org.apache.poi (5 CVEs)
Details

TuxCare rebuilt 3 org.apache.poi packages to address 5 CVEs. Fixed in 3.10-FINAL-tuxcare.1.

Affected packages

TuxCare:Maven / org.apache.poi:poi

Package

Name
org.apache.poi:poi
Purl
pkg:maven/org.apache.poi/poi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.10-FINAL
Fixed
3.10-FINAL-tuxcare.1

Affected versions

3.*
3.10-FINAL

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1777941834.json"
tuxcare 
{
    "base_version": "3.10-FINAL",
    "fixed_version": "3.10-FINAL-tuxcare.1"
}

TuxCare:Maven / org.apache.poi:poi-ooxml

Package

Name
org.apache.poi:poi-ooxml
Purl
pkg:maven/org.apache.poi/poi-ooxml

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.10-FINAL
Fixed
3.10-FINAL-tuxcare.1

Affected versions

3.*
3.10-FINAL

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1777941834.json"
tuxcare 
{
    "base_version": "3.10-FINAL",
    "fixed_version": "3.10-FINAL-tuxcare.1"
}

TuxCare:Maven / org.apache.poi:poi-scratchpad

Package

Name
org.apache.poi:poi-scratchpad
Purl
pkg:maven/org.apache.poi/poi-scratchpad

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.10-FINAL
Fixed
3.10-FINAL-tuxcare.1

Affected versions

3.*
3.10-FINAL

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1777941834.json"
tuxcare 
{
    "base_version": "3.10-FINAL",
    "fixed_version": "3.10-FINAL-tuxcare.1"
}