CLSA-2026-1788341776 TuxCare security update for org.springframework (14 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 14 CVEs. Fixed in 4.3.9.RELEASE-tuxcare.4...

CLSA-2026-1788340622 TuxCare security update for org.springframework (6 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 6 CVEs. Fixed in 5.3.30-tuxcare.9...

CLSA-2026-1788287051 TuxCare security update for org.springframework (24 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 24 CVEs. Fixed in 6.1.13-tuxcare.2...

CLSA-2026-1788283253 TuxCare security update for org.springframework (20 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 20 CVEs. Fixed in 6.1.19-tuxcare.3...

CLSA-2026-1788276466 TuxCare security update for org.springframework (17 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 17 CVEs. Fixed in 6.2.15-tuxcare.7...

CLSA-2026-1788276305 TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 26 org.springframework packages to address 25 CVEs. Fixed in 6.2.13-tuxcare.2...

CLSA-2026-1788253370 TuxCare security update for org.springframework (32 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 32 CVEs. Fixed in 6.1.14-tuxcare.1...

This Week in Spring - September 1st, 2026

Hi, Spring fans! Welcome to another exciting installment of This Week in Spring! I'm writing this from lovely Oslo, Norway, for the joyous JavaZone conference. Next, I'm going to Amsterdam for the interesting IntelliJ IDEA conference, and then finally it's off to Kansas City for the kinetic KCDC...

CLSA-2026-1788201541 TuxCare security update for org.springframework (17 CVEs)

TuxCare rebuilt 25 org.springframework packages to address 17 CVEs. Fixed in 6.2.19-tuxcare.1...

Linux Distros Unpatched Vulnerability : CVE-2026-47886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that evaluate user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack when the power operator...

Linux Distros Unpatched Vulnerability : CVE-2026-47890

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments. Spring Framework 7.0.0 - 7.0.8...

Linux Distros Unpatched Vulnerability : CVE-2026-59281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument...

Linux Distros Unpatched Vulnerability : CVE-2026-59283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL...

Linux Distros Unpatched Vulnerability : CVE-2026-47884

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of XsltView in a Spring MVC application can result in SSRF and RCE attack if the application has an / mapping that results in view rendering, and where the...

Linux Distros Unpatched Vulnerability : CVE-2026-47887

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open...

Linux Distros Unpatched Vulnerability : CVE-2026-59314

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file...

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.6.0.6)

The version of AOS installed on the remote host is prior to 7.6.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-7.6.0.6 advisory. - In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and...

Linux Distros Unpatched Vulnerability : CVE-2026-47883

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UrlHandlerFilter can be vulnerable to an open redirect when configured with very broadly matching patterns. The issue applies to the filter variants in both...

Linux Distros Unpatched Vulnerability : CVE-2026-47885

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The PartEventHttpMessageReader in Spring WebFlux does not enforce the maxPartSize limit when maxInMemorySize is set to -1. Spring Framework 7.0.0 - 7.0.8 Spring...

Linux Distros Unpatched Vulnerability : CVE-2026-59282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a...