CLSA-2026-1784596262 TuxCare security update for org.springframework (2 CVEs)

🗓️ 04 Aug 2026 14:52:45Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare fixes two vulnerabilities; rebuilds 25 org.springframework packages to 6.2.15-tuxcare.1.

Reporter	Title	Published	Views	Family All 131
IBM Security Bulletins	Security Bulletin: Due to use of spring-webmvc-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable to cache poisoning when resolving static resources.	2 Jun 202611:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	12 Aug 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Use of Cache Containing Sensitive Information (CVE-2026-22741)	15 Jun 202620:41	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-webmvc-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable toDenial of Service attacks.	6 Jun 202613:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Library Support for Spring	24 May 202615:08	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses uuid-11.1.0.tgz and spring-webmvc-6.2.17.jar which are vulnerable to CVE-2026-41988 and CVE-2026-22741.	27 May 202616:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Spring Boot's Cassandra have been addressed in IBM webMethods API Management	28 Aug 202604:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for May 2026	12 Jun 202622:52	–	ibm
ATTACKERKB	CVE-2026-22745	29 Apr 202611:35	–	attackerkb

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.15.3

EPSS0.00341

SSVC

TuxCare update org.springframework packages two vulnerabilities security update