CLSA-2026-1786569587 TuxCare security update for org.springframework (2 CVEs)

🗓️ 12 Aug 2026 21:19:47Reported by GoogleType

osv🔗 osv.dev👁 5 Views

TuxCare patched 2 CVEs in org.springframework packages, fixed in 5.2.13.RELEASE-tuxcare.9.

Reporter	Title	Published	Views	Family All 212
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)	27 Aug 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-webmvc-5.3.27.jar	10 Jul 202508:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	7 Jun 202314:32	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in VMware Tanzu Spring Framework affect IBM Process Designer 8.5.7 shipped with IBM Business Automation Workflow	5 Jun 202315:11	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Spring may affect IBM Business Automation Workflow - CVE-2023-20861	28 Apr 202317:07	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm

13 Aug 2026 00:45Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.15.3 - 6.5

EPSS0.0097

SSVC

org.springframework CVE-2021-22060 CVE-2021-22079 security update TuxCare patch