CLSA-2026-1794333499

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794333499.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1794333499

Upstream

CVE (2)

Published

2026-11-10T18:58:20Z

Modified

2026-11-11T01:30:02Z

Summary

TuxCare security update for org.apache.cxf (2 CVEs)

Details

TuxCare rebuilt 2 org.apache.cxf packages to address 2 CVEs. Fixed in 3.5.9-tuxcare.15.

Affected packages

TuxCare:Maven / org.apache.cxf:cxf-rt-rs-security-oauth2

Package

Name: org.apache.cxf:cxf-rt-rs-security-oauth2
Purl: pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

3.5.9

Fixed

3.5.9-tuxcare.15

Affected versions

3.*

3.5.9

3.5.9.tuxcare.1

3.5.9-tuxcare.2

3.5.9-tuxcare.3

3.5.9-tuxcare.4

3.5.9-tuxcare.5

3.5.9-tuxcare.6

3.5.9-tuxcare.7

3.5.9-tuxcare.8

3.5.9-tuxcare.9

3.5.9-tuxcare.10

3.5.9-tuxcare.11

3.5.9-tuxcare.12

3.5.9-tuxcare.13

3.5.9-tuxcare.14

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794333499.json"

tuxcare

{
    "base_version": "3.5.9",
    "fixed_version": "3.5.9-tuxcare.15"
}

TuxCare:Maven / org.apache.cxf:cxf-rt-rs-security-sso-oidc