TuxCare rebuilt 6 org.apache.poi packages to address 1 CVE. Fixed in 4.1.2-tuxcare.2.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1778028244.json"