CLSA-2026-1783386141 TuxCare security update for org.springframework.security (4 CVEs)

🗓️ 04 Aug 2026 14:52:42Reported by GoogleType

osv🔗 osv.dev👁 7 Views

TuxCare fixes four flaws in org.springframework.security; rebuilt 21 packages in 5.7.11-tuxcare.4

Reporter	Title	Published	Views	Family All 223
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	6 Aug 202620:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Quantum Safe Explorer is affected by multiple vulnerabilites	6 Jul 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software	22 Sep 202607:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	30 Jun 202610:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-security-core jar (CVE-2026-40988, CVE-2026-41694)	27 Jul 202607:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites and Denial of Service (Dos) attacks	26 Jun 202618:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Security vulnerability that could allow Redirection to Untrusted Sites	26 Jun 202618:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	21 Aug 202608:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilites identified in open source libraries shipped with IBM Guardium Cryptography Manager (GCM)	27 Aug 202613:39	–	ibm

07 Aug 2026 10:01Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.16.8 - 8.1

EPSS0.00296

SSVC