CLSA-2026-1794499784

See a problem?

Import Source

https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794499784.json

JSON Data

https://api.osv.dev/v1/vulns/CLSA-2026-1794499784

Upstream

CVE (3)

Published

2026-11-12T17:09:45Z

Modified

2026-11-12T19:30:04Z

Summary

TuxCare security update for org.apache.cxf (3 CVEs)

Details

TuxCare rebuilt 2 org.apache.cxf packages to address 3 CVEs. Fixed in 3.5.11-tuxcare.13.

Affected packages

TuxCare:Maven / org.apache.cxf:cxf-rt-rs-security-oauth2

Package

Name: org.apache.cxf:cxf-rt-rs-security-oauth2
Purl: pkg:maven/org.apache.cxf/cxf-rt-rs-security-oauth2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

3.5.11

Fixed

3.5.11-tuxcare.13

Affected versions

3.*

3.5.11

3.5.11-tuxcare.1

3.5.11-tuxcare.2

3.5.11-tuxcare.3

3.5.11-tuxcare.4

3.5.11-tuxcare.5

3.5.11-tuxcare.6

3.5.11-tuxcare.7

3.5.11-tuxcare.8

3.5.11-tuxcare.9

3.5.11-tuxcare.10

3.5.11-tuxcare.11

3.5.11-tuxcare.12

Database specific

source

"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794499784.json"

tuxcare

{
    "base_version": "3.5.11",
    "fixed_version": "3.5.11-tuxcare.13"
}

TuxCare:Maven / org.apache.cxf:cxf-rt-rs-security-sso-oidc