CLSA-2026-1779238042 TuxCare security update for org.springframework (3 CVEs)

🗓️ 04 Aug 2026 14:52:32Reported by GoogleType

osv-clsa🔗 osv.dev👁 12 Views

TuxCare fixes three vulnerabilities in Spring Framework packages; version 3.0.5.RELEASE-tuxcare.1.

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: Pivotal Spring Framework vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (TADDM)	17 Jun 201815:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Guardium Data Encryption (GDE)	12 Jan 202114:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSource GoPivotal Spring Framework Vulnerabilities affect IBM Security Guardium (CVE-2014-3578, CVE-2014-3625)	16 Jun 201821:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities	16 Jun 201822:05	–	ibm
IBM Security Bulletins	Security Bulletin: Pivotal Spring Framework as used in IBM QRadar SIEM is vulnerable to various CVE's	16 Jun 201821:50	–	ibm
Gitee	Exploit for Path Traversal in Pivotal_Software Spring_Framework	18 Apr 202008:03	–	gitee
Gitee	Exploit for Path Traversal in Pivotal_Software Spring_Framework	8 Mar 202010:44	–	gitee
Gitee	Exploit for Path Traversal in Pivotal_Software Spring_Framework	3 Jul 201914:04	–	gitee

15 Oct 2026 09:47Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25

CVSS 3.15.9

EPSS0.10323

SSVC