CLSA-2026-1783645390

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645390.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1783645390

Upstream

CVE (2)

Published

2026-08-04T14:52:42Z

Modified

2026-11-02T19:45:40Z

Summary

TuxCare security update for org.springframework.security (2 CVEs)

Details

TuxCare rebuilt 2 org.springframework.security packages to address 2 CVEs. Fixed in 5.8.16-tuxcare.12.

Affected packages

TuxCare:Maven

org.springframework.security:spring-security-saml2-service-provider

Package

Name: org.springframework.security:spring-security-saml2-service-provider
Purl: pkg:maven/org.springframework.security/spring-security-saml2-service-provider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.8.16

Fixed

5.8.16-tuxcare.12

Affected versions

5.*

5.8.16

5.8.16.tuxcare

5.8.16.tuxcare.1

5.8.16.tuxcare.2

5.8.16.tuxcare.3

5.8.16-tuxcare.4

5.8.16-tuxcare.5

5.8.16-tuxcare.6

5.8.16-tuxcare.7

5.8.16-tuxcare.8

5.8.16-tuxcare.9

5.8.16-tuxcare.10

5.8.16-tuxcare.11

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1783645390.json"

tuxcare

{
    "base_version": "5.8.16",
    "fixed_version": "5.8.16-tuxcare.12"
}

org.springframework.security:spring-security-web