CLSA-2026-1773015254 TuxCare security update for org.springframework.security (5 CVEs)

🗓️ 04 Aug 2026 14:52:11Reported by GoogleType

osv🔗 osv.dev👁 4 Views

TuxCare rebuilt fifteen org.springframework.security packages to fix five vulnerabilities; patch 4.2.20.RELEASE-tuxcare.1.

Reporter	Title	Published	Views	Family All 301
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	7 Mar 202515:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-38827 spring-boot-starter-security-3.3.5.jar: 1 vulnerabilities CVE-2024-38827	20 Feb 202505:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Spring Security [CVE-2024-38827]	27 Feb 202516:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services - Multiple CVEs addressed (February 2024)	15 Apr 202502:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed	14 Jun 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in old Spring Framework versions affect watsonx.data	13 Jun 202510:20	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Authorization Rules in Spring Security Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38827)	7 Jul 202522:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0.2	21 Jun 202513:39	–	ibm

07 Aug 2026 10:00Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.18.2 - 9.8

CVSS 29

EPSS0.12351

SSVC