CLSA-2026-1778460300 TuxCare security update for org.springframework (1 CVE)

🗓️ 04 Aug 2026 14:52:30Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare update fixes one vulnerability by rebuilding 25 spring packages; 6.0.16-tuxcare.2.

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)	15 Sep 202616:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Jun 202608:35	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Uncontrolled Resource Consumption (CVE-2026-22740)	15 Jun 202620:42	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-web-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable to allows an attacker to consume available disk space.	6 Jun 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:08	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service Security Vulnerability in Spring Framework Affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2026-22740)	11 Sep 202618:37	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Cloud Pak for Data System (Yosemite 1.0)	8 Sep 202615:03	–	ibm
attackerkb	CVE-2026-22740	29 Apr 202610:46	–	attackerkb

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5

EPSS0.00344

SSVC

tuxcare update spring framework rebuilt packages vulnerability fix six point sixteen