CLSA-2026-1787732821 TuxCare security update for org.springframework (6 CVEs)

🗓️ 26 Aug 2026 08:27:01Reported by GoogleType

osv🔗 osv.dev👁 6 Views

TuxCare rebuilt org.springframework 4.3.25.RELEASE to fix 6 CVEs.

Reporter	Title	Published	Views	Family All 601
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with OpenJDK, commons-compress and spring-web-5.3.27/spring-web-5.3.32 affect IBM Cloud Object Storage Systems (April 2024v1)	1 Apr 202416:26	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities	11 Jul 202407:21	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-beans-6.2.3.jar (CVE-2025-41242)	7 Oct 202507:21	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of VMWare Tanzu Spring Framework, IBM DevOps Build is vulnerable to remote attacker to conduct phising attacks	3 Feb 202522:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Spring-core affects IBM Netezza Appliance	11 Aug 202606:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for May 2024 - Multiple CVEs addressed	14 Jun 202409:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by multiple vulnerabilities in spring-expression jar	27 Jul 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.1.0	5 Dec 202509:12	–	ibm

26 Aug 2026 13:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5 - 8.1

EPSS0.02573

SSVC

org.springframework TuxCare CVE remediation library 6 vulnerabilities