CLSA-2026-1793901153

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793901153.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1793901153

Upstream

CVE (2)

CVE-2024-38828
CVE-2026-41850

Published

2026-11-05T18:52:34Z

Modified

2026-11-06T13:15:22Z

Summary

TuxCare security update for org.springframework (2 CVEs)

Details

TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.7.

Affected packages

TuxCare:Maven / org.springframework:spring-expression

Package

Name: org.springframework:spring-expression
Purl: pkg:maven/org.springframework/spring-expression

Affected ranges

Type: ECOSYSTEM
Events: Introduced

4.3.25.RELEASE

Fixed

4.3.25.RELEASE-tuxcare.7

Affected versions

4.*

4.3.25.RELEASE

4.3.25.RELEASE-tuxcare.1

4.3.25.RELEASE-tuxcare.2

4.3.25.RELEASE-tuxcare.3

4.3.25.RELEASE-tuxcare.4

4.3.25.RELEASE-tuxcare.5

4.3.25.RELEASE-tuxcare.6

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793901153.json"

tuxcare

{
    "base_version": "4.3.25.RELEASE",
    "fixed_version": "4.3.25.RELEASE-tuxcare.7"
}

TuxCare:Maven / org.springframework:spring-webmvc