CLSA-2026-1783299707 TuxCare security update for org.springframework (3 CVEs)

🗓️ 04 Aug 2026 14:52:42Reported by GoogleType

osv🔗 osv.dev👁 6 Views

TuxCare updates Spring Framework, fixes three CVEs, rebuilds 24 packages, version 5.3.7-tuxcare.4.

Reporter	Title	Published	Views	Family All 163
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance	11 Aug 202606:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	12 Aug 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DB2 Developer extension is affected via vulnerability in spring-web(CVE-2026-22740)	10 Aug 202614:14	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-webmvc-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable toDenial of Service attacks.	6 Jun 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Jun 202608:35	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Uncontrolled Resource Consumption (CVE-2026-22740)	15 Jun 202620:42	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-web-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable to allows an attacker to consume available disk space.	6 Jun 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:08	–	ibm

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.5 - 7.5

EPSS0.00344

SSVC