CLSA-2025-1760918790 TuxCare security update for com.google.code.gson:gson (2 CVEs)

🗓️ 04 Aug 2026 14:52:05Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare rebuilt the gson library to address two vulnerabilities, fixed in 2.9.1-tuxcare.1.

Reporter	Title	Published	Views	Family All 170
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: XML External Entity (XXE) vulnerability (CVE-2026-24400)	11 May 202618:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Connect2id Nimbus JOSE + JWT (CVE-2025-53864)	7 Nov 202514:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow a remote attacker to cause a denial of service CVE-2025-53864	8 Dec 202515:13	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of IBM Storage Scale, IBM Cloud Pak System is affected by multiple vulnerabilities	30 Jun 202611:09	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Connect2id Nimbus JOSE + JWT library	16 Apr 202614:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerability fixes in IBM webMethods Managed File Transfer On-Prem	22 Dec 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.	6 May 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in nimbus-jose-jwt	30 Oct 202507:13	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities addressed in Cloudera Observability 3.6.2	9 Mar 202617:07	–	ibm

07 Aug 2026 10:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.8 - 9.1

CVSS 48.2

EPSS0.00806

SSVC