CLSA-2026-1783386123 TuxCare security update for org.springframework (2 CVEs)

🗓️ 04 Aug 2026 14:52:42Reported by GoogleType

osv

osv🔗 osv.dev👁 4 Views

TuxCare updates 24 org.springframework packages to fix two CVEs, now version 5.3.31-tuxcare.6.

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance	11 Aug 202606:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Cross-site Scripting attacks, Denial of Service (DoS) attacks, and Server-Side Request Forgery attacks	26 Jun 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	21 Jul 202605:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for July 2026 - Multiple CVEs addressed	10 Aug 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by multiple Spring Framework vulnerabilities that could allow exploiting WebSocket sessions and cross-site scripting	26 Jun 202618:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
Chainguard	CVE-2026-41839 vulnerabilities	6 Aug 202620:28	–	cgr
CNNVD	Spring Framework 授权问题漏洞	9 Jun 202600:00	–	cnnvd
CNNVD	VMware Spring Framework 安全特征问题漏洞	9 Jun 202600:00	–	cnnvd

07 Aug 2026 10:01Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.14.8 - 7.5

EPSS0.00197

SSVC

tuxcare org.springframework spring framework two vulnerabilities five point three