CLSA-2026-1783386136 TuxCare security update for 22 packages (1 CVE)

🗓️ 04 Aug 2026 14:52:42Reported by GoogleType

osv_clsa🔗 osv.dev👁 15 Views

TuxCare rebuilt 22 packages to address 1 CVE, fixed in 5.4.30.Final-tuxcare.2.

Reporter	Title	Published	Views	Family All 91
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	2 Mar 202606:11	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Hibernate Vulnerability in IBM Library Support for Hibernate	13 Apr 202615:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	7 May 202613:57	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains a vulnerability related to use of the Hibernate library	10 Apr 202613:46	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of hibernate-core. IBM webMethods BPM is vulnerable to a second-order SQL injection	27 Mar 202608:03	–	ibm
GithubExploit	Exploit for CVE-2026-0603	21 Aug 202604:19	–	githubexploit
attackerkb	CVE-2026-0603	23 Jan 202606:31	–	attackerkb
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core-jakarta Dependency in Bamboo Data Center	7 Aug 202616:31	–	atlassian
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core Dependency in Confluence Data Center	21 May 202621:30	–	atlassian
Atlassian	SQLi (SQL Injection) org.hibernate:hibernate-core-jakarta Dependency in Crowd Data Center	1 Aug 202604:31	–	atlassian

15 Oct 2026 09:47Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.18.3

EPSS0.01047

SSVC

tuxcare packages twenty two packages fixed vulnerability final tuxcare version