TuxCare rebuilt org.springframework.security:spring-security-oauth2-jose to address 1 CVE. Fixed in 6.3.10-tuxcare.23.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794185565.json"
{ "base_version": "6.3.10", "fixed_version": "6.3.10-tuxcare.23" }