CLSA-2026-1782867606 TuxCare security update for org.springframework (12 CVEs)

🗓️ 04 Aug 2026 14:52:40Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

TuxCare fixes twelve CVEs in org.springframework; 21 packages rebuilt to 4.1.9.RELEASE-tuxcare.1.

Reporter	Title	Published	Views	Family All 1012
zdt	Spring4Shell Spring Framework Class Property Remote Code Execution Exploit	10 May 202200:00	–	zdt
vulnersOsv	ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +41159 more potentially affected by CVE-2022-22970 via org.springframework:spring-beans (>=1.2 <=5.2.21.RELEASE)	13 May 202200:00	–	vulnersosv
vulnersOsv	ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (=0.28.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.1.1 <=0.112.0) +8250 more potentially affected by CVE-2024-22259 via org.springframework:spring-web (>=6.1.0 <=6.1.4)	16 Mar 202406:30	–	vulnersosv
vulnersOsv	africa.absa:inception-api (>=1.1.0 <=1.2.0), africa.absa:inception-codes-api (>=1.1.0 <=1.2.0) +3609 more potentially affected by CVE-2022-22965 via org.springframework:spring-webmvc (>=5.3.0 <=5.3.17)	31 Mar 202218:30	–	vulnersosv
vulnersOsv	be.dnsbelgium:rdap-server (>=4.0.0 <=4.0.3), be.personify.iam:personify-api (>=1.5.0.RELEASE <=1.5.2.RELEASE) +2820 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (>=6.0.0 <=6.0.23)	19 Dec 202418:31	–	vulnersosv
vulnersOsv	ai.superstream:spring-kafka (>=2.8.4-alpha1 <=2.8.4-alpha6), biz.eyebeam.mssc:mssc-public-bom (>=1.0.1 <=1.0.5) +1894 more potentially affected by CVE-2022-22971 via org.springframework:spring-messaging (>=5.3.0 <=5.3.2)	13 May 202200:00	–	vulnersosv
vulnersOsv	ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +36874 more potentially affected by CVE-2024-22262 via org.springframework:spring-web (>=1.2.1 <=5.3.33)	16 Apr 202406:30	–	vulnersosv
vulnersOsv	africa.absa:inception-application (>=1.1.0 <=1.2.0), africa.absa:inception-test (>=1.1.0 <=1.2.0) +710 more potentially affected by CVE-2022-22965 via org.springframework:spring-webflux (>=5.3.0 <=5.3.17)	31 Mar 202218:30	–	vulnersosv
vulnersOsv	ai.ancf.lmos:lmos-operator (>=0.0.4 <=0.1.0), ai.driftkit:driftkit-chat-assistant-framework (>=0.5.0 <=0.8.7) +3144 more potentially affected by CVE-2024-38819 via org.springframework:spring-webmvc (>=6.1.0 <=6.1.13)	19 Dec 202418:31	–	vulnersosv
vulnersOsv	ColumnPack:ColumnPack-plugin (=1.0.3), CustomHistory:CustomHistory (>=1.1 <=1.3) +39193 more potentially affected by CVE-2022-22968 via org.springframework:spring-context (>=1.2.1 <=5.2.20.RELEASE)	15 Apr 202200:00	–	vulnersosv

07 Aug 2026 10:01Current

7High risk

Vulners AI Score7

CVSS 27.5

CVSS 3.19.8

EPSS0.99677

SSVC

tuxcare update org.springframework twelve vulnerabilities packages rebuilt version 4.1.9