CLSA-2026-1789676383
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789676383.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1789676383
- Upstream
- Published
- 2026-09-17T20:19:43Z
- Modified
- 2026-09-18T01:30:02Z
- Summary
- TuxCare security update for org.springframework.security (8 CVEs)
- Details
-
TuxCare rebuilt 21 org.springframework.security packages to address 8 CVEs. Fixed in 5.8.14-tuxcare.1.
Affected packages
TuxCare:Maven
org.springframework.security:spring-security-acl
org.springframework.security:spring-security-aspects
org.springframework.security:spring-security-bom
org.springframework.security:spring-security-cas
org.springframework.security:spring-security-config
org.springframework.security:spring-security-core
org.springframework.security:spring-security-crypto
org.springframework.security:spring-security-data
org.springframework.security:spring-security-ldap
org.springframework.security:spring-security-messaging
org.springframework.security:spring-security-oauth2-client
org.springframework.security:spring-security-oauth2-core
org.springframework.security:spring-security-oauth2-jose
org.springframework.security:spring-security-oauth2-resource-server
Package
- Name
- org.springframework.security:spring-security-oauth2-resource-server
- Purl
- pkg:maven/org.springframework.security/spring-security-oauth2-resource-server
org.springframework.security:spring-security-openid
org.springframework.security:spring-security-remoting
org.springframework.security:spring-security-rsocket
org.springframework.security:spring-security-saml2-service-provider
Package
- Name
- org.springframework.security:spring-security-saml2-service-provider
- Purl
- pkg:maven/org.springframework.security/spring-security-saml2-service-provider