TuxCare rebuilt org.apache.commons:commons-configuration2 to address 2 CVEs. Fixed in 2.12.0-tuxcare.1.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1784682834.json"