CLSA-2026-1790090857

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1790090857.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1790090857

Upstream

CVE (2)

Published

2026-09-22T15:27:37Z

Modified

2026-11-02T19:46:20Z

Summary

TuxCare security update for org.springframework (2 CVEs)

Details

TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 5.3.25-tuxcare.10.

Affected packages

TuxCare:Maven / org.springframework:spring-expression

Package

Name: org.springframework:spring-expression
Purl: pkg:maven/org.springframework/spring-expression

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.3.25

Fixed

5.3.25-tuxcare.10

Affected versions

5.*

5.3.25

5.3.25-tuxcare.1

5.3.25-tuxcare.2

5.3.25-tuxcare.3

5.3.25-tuxcare.4

5.3.25-tuxcare.5

5.3.25-tuxcare.6

5.3.25-tuxcare.7

5.3.25-tuxcare.8

5.3.25-tuxcare.9

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1790090857.json"

tuxcare

{
    "base_version": "5.3.25",
    "fixed_version": "5.3.25-tuxcare.10"
}

TuxCare:Maven / org.springframework:spring-web