CLSA-2026-1785946854 TuxCare security update for org.springframework (2 CVEs)

🗓️ 05 Aug 2026 16:20:54Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare security update fixes two vulnerabilities by rebuilding Spring packages and is released as 5.1.9.RELEASE-tuxcare.3.

Reporter	Title	Published	Views	Family All 105
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance	11 Aug 202606:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by a Spring Framework vulnerability that could allow Cross-site Scripting attacks, Denial of Service (DoS) attacks, and Server-Side Request Forgery attacks	26 Jun 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services is Affected by Multiple Vulnerabilities.	21 Jul 202605:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for July 2026 - Multiple CVEs addressed	10 Aug 202606:56	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance	12 Aug 202608:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Terracotta is affected by multiple Spring Framework vulnerabilities that could allow exploiting WebSocket sessions and cross-site scripting	26 Jun 202618:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:33	–	ibm
Chainguard	CVE-2026-41845 vulnerabilities	31 Jul 202620:22	–	cgr
CNNVD	Spring Framework 跨站脚本漏洞	9 Jun 202600:00	–	cnnvd

07 Aug 2026 10:01Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.1 - 7.5

EPSS0.00171

SSVC