2609 matches found
CLSA-2026-1786552823 TuxCare security update for org.springframework (10 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.7-tuxcare.5...
CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (3 CVEs)
TuxCare rebuilt 6 org.springframework.pulsar packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...
CLSA-2026-1786543288 TuxCare security update for org.springframework.ws (2 CVEs)
TuxCare rebuilt 6 org.springframework.ws packages to address 2 CVEs. Fixed in 3.1.6-tuxcare.1...
Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance
Summary The Spring Framework package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41854 Vulnerability Details CVEID:CVE-2026-41854 DESCRIPTION: Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate ...
Security Bulletin:Vulnerability in Spring MVC affects IBM Netezza Appliance
Summary The Spring MVC package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41846 Vulnerability Details CVEID:CVE-2026-41846 DESCRIPTION: Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle...
Security Bulletin:Vulnerability in Spring Framework affects IBM Netezza Appliance
Summary The Spring Framework package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41845 Vulnerability Details CVEID:CVE-2026-41845 DESCRIPTION: Due to incorrect escaping, the use of JavaScriptUtils.javaScriptEscape may lead to JavaScript code...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41844 Vulnerability Details CVEID:CVE-2026-41844 DESCRIPTION: A Spring MVC or Spring WebFlux application which configures a mapping for "/" where the view...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41843 Vulnerability Details CVEID:CVE-2026-41843 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Path Traversal attacks when resolving...
Security Bulletin:Vulnerability in Spring MVC and WebFlux affects IBM Netezza Appliance
Summary The Spring MVC and WebFlux package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVE CVE-2026-41841 Vulnerability Details CVEID:CVE-2026-41841 DESCRIPTION: Spring MVC and WebFlux applications are vulnerable to Information Disclosure attacks when...
CLSA-2026-1786481559 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 22 org.springframework packages to address 1 CVE. Fixed in 5.1.9.RELEASE-tuxcare.4...
CLSA-2026-1786423284 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.8...
CLSA-2026-1786369191 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.30-tuxcare.6...
Security Bulletin:Vulnerability in spring affects IBM Netezza Appliance
Summary The spring package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-41848 Vulnerability Details CVEID:CVE-2026-41848 DESCRIPTION: Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to...
CLSA-2026-1786342480 TuxCare security update for org.springframework (3 CVEs)
TuxCare rebuilt 22 org.springframework packages to address 3 CVEs. Fixed in 5.0.5.RELEASE-tuxcare.4...
CLSA-2026-1786339580 TuxCare security update for org.springframework (4 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.24-tuxcare.5...
DoS (Denial of Service) org.springframework:spring-expression Dependency in Bamboo Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 12.0.0, and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to...
DoS (Denial of Service) org.springframework:spring-webmvc Dependency in Bamboo Data Center
This High severity DoS Denial of Service vulnerability was introduced in versions 12.0.0 and 12.1.0 of Bamboo Data Center. This DoS Denial of Service vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H allows an unauthenticated attacker to cau...
Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.
Summary Maximo AI Service uses micrometer-core-1.15.11.jar, spring-core-6.2.18.jar, spring-security-web-6.5.10.jar, spring-data-commons-3.5.11.jar, spring-webmvc-6.2.18.jar, spring-expression-6.2.18.jar and spring-security-config-6.5.10.jar which are vulnerable to CVE-2026-40983, CVE-2026-40984,...