14429 matches found
CLSA-2026-1788342506 TuxCare security update for org.springframework (11 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 11 CVEs. Fixed in 6.0.16-tuxcare.6...
CLSA-2026-1788341776 TuxCare security update for org.springframework (14 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4...
Cleartext Storage Of Sensitive Information
Spring AMQP is vulnerable to Cleartext Storage of Sensitive Information. The vulnerability is due to the configured admin password being embedded in cleartext in the exception message when the RabbitMQ management aliveness check fails...
CLSA-2026-1788340622 TuxCare security update for org.springframework (6 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.30-tuxcare.9...
CLSA-2026-1788340467 TuxCare security update for org.springframework.security (2 CVEs)
TuxCare rebuilt 19 org.springframework.security packages to address 2 CVEs. Fixed in 6.1.6-tuxcare.6...
Improper Authorization
Spring AI is vulnerable to Improper Authorization. The vulnerability is due to per-request tool restrictions not being fully enforced during tool-call dispatch, allowing a tool unavailable to the current request to be invoked and potentially enabling privilege escalation...
CLSA-2026-1788333969 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 19 org.springframework.security packages to address 1 CVE. Fixed in 6.4.13-tuxcare.4...
Spring Security CVE-2026-22732 Detection / Remediation Tool
This OpenRewrite tool detects Java projects susceptible to CVE-2026-22732 in Spring Security and provides automated remediation recipes. It identifies affected Spring Security versions and response handling patterns that can cause security headers to be omitted, and can remediate affected project...
CLSA-2026-1788287051 TuxCare security update for org.springframework (24 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2...
CLSA-2026-1788283253 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3...
CLSA-2026-1788279697 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 3 org.springframework.data packages to address 1 CVE. Fixed in 4.2.12-tuxcare.3...
CLSA-2026-1788279532 TuxCare security update for org.springframework.data (1 CVE)
TuxCare rebuilt 5 org.springframework.data packages to address 1 CVE. Fixed in 4.2.12-tuxcare.3...
Security Bulletin: Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management
Summary Multiple vulnerabilities found in spring-boot-3.3.11.jar - part of IBM webMethods API Management have been addressed Vulnerability Details CVEID:CVE-2026-40973 DESCRIPTION: A local attacker on the same host as the application may be able to take control of the directory used by...
CLSA-2026-1788276466 TuxCare security update for org.springframework (17 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 17 CVEs. Fixed in 6.2.15-tuxcare.7...
CLSA-2026-1788276305 TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 26 org.springframework packages to address 25 CVEs. Fixed in 6.2.13-tuxcare.2...
CLSA-2026-1788274092 TuxCare security update for org.springframework (20 CVEs)
TuxCare rebuilt 25 org.springframework packages to address 20 CVEs. Fixed in 6.1.15-tuxcare.4...
CVE-2026-82265
A flaw was found in Zipkin. Unauthenticated attackers can exploit exposed Spring Boot Actuator endpoints on the tracing API port to access sensitive information. This allows them to read environment variables, bean configurations, and storage credentials. Additionally, attackers can modify log...
CLEANSTART-2026-TM54369 Security fixes in spring-boot 4.0.7-r0
Package spring-boot version 4.0.7-r0 fixes 3 vulnerabilities: CVE-2026-54399, CVE-2026-54428, CVE-2026-64607...
