CLSA-2026-1781571272 TuxCare security update for org.springframework.security (2 CVEs)

🗓️ 04 Aug 2026 14:52:37Reported by GoogleType

osv🔗 osv.dev👁 6 Views

TuxCare rebuilt nineteen org.springframework.security packages to fix two vulnerabilities in version 6.4.3-tuxcare.4.

Reporter	Title	Published	Views	Family All 165
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites	26 Jun 202618:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities in Spring Security affect IBM Sterling B2B Integrator and IBM Sterling File Gateway	15 Sep 202613:32	–	ibm
Atlassian	BASM (Broken Authentication & Session Management) in Bitbucket Data Center	15 Jul 202604:29	–	atlassian
Atlassian	BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Crowd Data Center	1 Aug 202604:32	–	atlassian
Atlassian	BASM (Broken Authentication & Session Management) SubjectDnX509PrincipalExtractor Dependency in Jira Service Management Data Center	10 Jul 202604:29	–	atlassian
Atlassian	BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-web Dependency in Jira Software Data Center	10 Jul 202604:29	–	atlassian
Chainguard	CVE-2026-41706 vulnerabilities	14 Aug 202602:16	–	cgr

07 Aug 2026 10:01Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.16.8 - 8.1

EPSS0.00297

SSVC