CLSA-2026-1781657700 TuxCare security update for org.springframework (4 CVEs)

🗓️ 04 Aug 2026 14:52:37Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare fixes four vulnerabilities in springframework packages by rebuilding twenty four packages.

Reporter	Title	Published	Views	Family All 384
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for Sep 2024 - Multiple CVEs addressed	4 Oct 202406:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	31 May 202317:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in VMware Tanzu Spring Framework affect IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	5 Jun 202315:11	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Spring may affect IBM Business Automation Workflow - CVE-2023-20861	28 Apr 202317:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in spring-expression-5.3.31.jar affects IBM DevOps Code ClearCase [CVE-2024-38808]	10 Mar 202605:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect embedded Content Management Interoperability Service in IBM Business Automation Workflow - CVE-2023-20861, CVE-2023-20863	27 Jul 202319:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)	15 Sep 202616:47	–	ibm

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5 - 7.5

EPSS0.03514

SSVC