TuxCare rebuilt org.apache.cxf:cxf-rt-rs-security-oauth2 to address 1 CVE. Fixed in 3.0.12-tuxcare.3.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794316048.json"
{ "base_version": "3.0.12", "fixed_version": "3.0.12-tuxcare.3" }