CLSA-2026-1786601101 TuxCare security update for org.springframework (3 CVEs)

🗓️ 13 Aug 2026 06:05:01Reported by GoogleType

osv

osv🔗 osv.dev👁 6 Views

TuxCare patches 3 CVEs in 22 Spring packages; fixed in 5.0.5.RELEASE-tuxcare.5.

Reporter	Title	Published	Views	Family All 196
IBM Security Bulletins	Security Bulletin: Vulnerabilities in hoek, Bouncy Castle Inc, Spring Framework, golang, Apache Commons, semver and Google Guava might affect IBM Storage Defender Copy Data Management	10 Apr 202614:43	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of spring-webmvc-6.2.17.jar, IBM Sterling Connect:Direct Web Services is vulnerable to cache poisoning when resolving static resources.	2 Jun 202611:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities	13 Jan 202215:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller has addressed multiple vulnerabilities	2 Dec 202219:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	12 Aug 202611:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for March 2026.	27 Mar 202609:11	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Use of Cache Containing Sensitive Information (CVE-2026-22741)	15 Jun 202620:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs affect IBM Integration Designer	1 Feb 202319:40	–	ibm

13 Aug 2026 12:45Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24

CVSS 3.14.3

EPSS0.01268

SSVC

org.springframework CVE TuxCare security update Java