CLSA-2026-1787323603

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1787323603

Upstream

CVE (3)

Published

2026-08-21T14:46:43Z

Modified

2026-11-02T19:46:00Z

Summary

TuxCare security update for org.springframework.security (3 CVEs)

Details

TuxCare rebuilt 2 org.springframework.security packages to address 3 CVEs. Fixed in 6.2.2-tuxcare.4.

Affected packages

TuxCare:Maven

org.springframework.security:spring-security-saml2-service-provider

Name: org.springframework.security:spring-security-saml2-service-provider
Purl: pkg:maven/org.springframework.security/spring-security-saml2-service-provider

6.*

6.2.2

6.2.2-tuxcare.1

6.2.2-tuxcare.2

6.2.2-tuxcare.3

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1787323603.json"

tuxcare

{
    "base_version": "6.2.2",
    "fixed_version": "6.2.2-tuxcare.4"
}

org.springframework.security:spring-security-web

6.*