TuxCare rebuilt org.springframework.ws:spring-ws-security to address 2 CVEs. Fixed in 4.0.16-tuxcare.3.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794181098.json"
{ "base_version": "4.0.16", "fixed_version": "4.0.16-tuxcare.3" }