CLSA-2026-1786479067

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786479067.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1786479067

Upstream

CVE (4)

Published

2026-08-11T20:11:07Z

Modified

2026-11-02T19:45:53Z

Summary

TuxCare security update for org.springframework.security (4 CVEs)

Details

TuxCare rebuilt 2 org.springframework.security packages to address 4 CVEs. Fixed in 5.6.10-tuxcare.7.

Affected packages

TuxCare:Maven

org.springframework.security:spring-security-saml2-service-provider

Package

Name: org.springframework.security:spring-security-saml2-service-provider
Purl: pkg:maven/org.springframework.security/spring-security-saml2-service-provider

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.6.10

Fixed

5.6.10-tuxcare.7

Affected versions

5.*

5.6.10

5.6.10-tuxcare.1

5.6.10-tuxcare.2

5.6.10-tuxcare.3

5.6.10-tuxcare.4

5.6.10-tuxcare.5

5.6.10-tuxcare.6

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1786479067.json"

tuxcare

{
    "base_version": "5.6.10",
    "fixed_version": "5.6.10-tuxcare.7"
}

org.springframework.security:spring-security-web