CLSA-2026-1789288364 TuxCare security update for org.springframework.data:spring-data-redis (1 CVE)

TuxCare rebuilt org.springframework.data:spring-data-redis to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

PT-2026-97251

TuxCare rebuilt org.springframework.data:spring-data-redis to address 1 CVE. Fixed in 3.3.13-tuxcare.5...

CLSA-2026-1788428259 TuxCare security update for org.springframework.data:spring-data-redis (4 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-redis to address 4 CVEs. Fixed in 3.3.13-tuxcare.4...

PT-2026-90913

TuxCare rebuilt org.springframework.data:spring-data-redis to address 4 CVEs. Fixed in 3.3.13-tuxcare.4...

CLSA-2026-1788203900 TuxCare security update for org.springframework.data:spring-data-redis (4 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-redis to address 4 CVEs. Fixed in 3.3.13-tuxcare.3...

PT-2026-89668

TuxCare rebuilt org.springframework.data:spring-data-redis to address 4 CVEs. Fixed in 3.3.13-tuxcare.3...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2026-65182 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2026-65182 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2026-65905 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2026-65905 Source...

ai.ylyue:yue-library-base (>=finchley.sr2.sr1, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +4123 more potentially affected by CVE-2026-68525 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.0, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.0, =finchley.sr2.sr1, =finchley.sr4, =finchley.sr2.sr1, =finchley.sr2.sr1, =finchley.sr4, =1.0.0, =0.0.2, =0.0.3, =1, =1, =1, =1, =1, =10 - be.ordina:microservices-dashboard-server 1.0.1 and more Source cves: CVE-2026-68525 Source...

SpEL Injection

Spring Data KeyValue / Spring Data Redis is vulnerable to SpEL Injection. The vulnerability is due to unsanitized Sort input being evaluated by SpelPropertyComparator, allowing an attacker to inject and execute malicious SpEL expressions...

CLSA-2026-1782089830 TuxCare security update for org.springframework.data:spring-data-redis (2 CVEs)

TuxCare rebuilt org.springframework.data:spring-data-redis to address 2 CVEs. Fixed in 2.7.18-tuxcare.3...

PT-2026-75140

TuxCare rebuilt org.springframework.data:spring-data-redis to address 2 CVEs. Fixed in 2.7.18-tuxcare.3...

org.springframework.statemachine:spring-statemachine-cluster (>=3.2.0, <=3.2.1), org.springframework.statemachine:spring-statemachine-data-common (>=3.2.0, <=3.2.1) +10 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-kryo (>=3.2.0, <=3.2.1)

org.springframework.statemachine:spring-statemachine-kryo MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2026-41862 Source advisory: OSV:GHSA-85QJ-F5WG-RWP9https://vulners.com/osvghsa/OSV...

org.springframework.statemachine:spring-statemachine-cluster (>=3.2.0, <=3.2.1), org.springframework.statemachine:spring-statemachine-data-common (>=3.2.0, <=3.2.1) +10 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-kryo (>=3.2.0, <=3.2.1)

org.springframework.statemachine:spring-statemachine-kryo MAVEN version =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.0, =3.2.1 Source cves: CVE-2026-41862 Source advisory: GHSA-85QJ-F5WG-RWP9https://vulners.com/github/GHSA-85QJ...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1, <=0.0.4), guru.nicks.commons:statemachine-starter (>=100.260315.1, <=100.260611.0) +13 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-kryo (>=4.0.0, <=4.0.1)

org.springframework.statemachine:spring-statemachine-kryo MAVEN version =4.0.0, =0.0.1, =100.260315.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 So...

org.springframework.statemachine:spring-statemachine-samples-datapersist (4.0.0), org.springframework.statemachine:spring-statemachine-samples-eventservice (4.0.0) potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-redis (4.0.0)

org.springframework.statemachine:spring-statemachine-data-redis MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.statemachine:spring-statemachine-data-redis and may be impacted: -...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1, <=0.0.4), guru.nicks.commons:statemachine-starter (>=100.260315.1, <=100.260611.0) +13 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-kryo (>=4.0.0, <=4.0.1)

org.springframework.statemachine:spring-statemachine-kryo MAVEN version =4.0.0, =0.0.1, =100.260315.1, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 So...

cn.net.pap:pap4j-boot3-starter-statemachine (>=0.0.1, <=0.0.4), guru.nicks.commons:statemachine-starter (>=100.260315.1, <=100.260611.0) +8 more potentially affected by CVE-2026-41862 via org.springframework.statemachine:spring-statemachine-data-common (>=4.0.0, <=4.0.1)

org.springframework.statemachine:spring-statemachine-data-common MAVEN version =4.0.0, =0.0.1, =100.260315.1, =4.0.0, =4.0.0, =4.0.0, =4.0.1 - org.springframework.statemachine:spring-statemachine-samples-datajpa 4.0.0 -...

org.springframework.data:spring-cql (1.4.9.release), org.springframework.data:spring-data-cassandra (1.4.9.release) +13 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.12.9.release)

org.springframework.data:spring-data-commons MAVEN version 1.12.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.4.9.release -...

org.springframework.data:spring-cql (1.5.2.release), org.springframework.data:spring-data-cassandra (1.5.2.release) +14 more potentially affected by CVE-2026-41721 via org.springframework.data:spring-data-commons (1.13.2.release)

org.springframework.data:spring-data-commons MAVEN version 1.13.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.data:spring-data-commons and may be impacted: - org.springframework.data:spring-cql 1.5.2.release -...