CLSA-2026-1777250295 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 5 CVEs. Fixed in 4.1.7.RELEASE-tuxcare.3...

CLSA-2026-1777250292 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.25-tuxcare.1...

CLSA-2026-1776126823 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 10 CVEs. Fixed in 5.3.24-tuxcare.1...

CLSA-2026-1776040412 TuxCare security update for org.springframework (13 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 13 CVEs. Fixed in 5.3.7-tuxcare.2...

CLSA-2026-1776040408 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.0.RELEASE-tuxcare.3...

CLSA-2026-1774916751 TuxCare security update for org.springframework (5 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 5 CVEs. Fixed in 5.3.7-tuxcare.1...

CLSA-2026-1774916750 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.37-tuxcare.1...

CLSA-2026-1774916754 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.2...

CLSA-2025-1765930087 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.29-tuxcare.3...

CLSA-2025-1762906011 TuxCare security update for org.springframework (12 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 12 CVEs. Fixed in 5.3.30-tuxcare.1...

CLSA-2025-1766534902 TuxCare security update for org.springframework (4 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 4 CVEs. Fixed in 5.3.27-tuxcare.2...

CLSA-2025-1761696401 TuxCare security update for org.springframework (8 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1...

CLSA-2025-1760313986 TuxCare security update for org.springframework (29 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1...

CLSA-2025-1756425960 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 6.0.23-tuxcare.1...

CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...

CLSA-2025-1760313981 TuxCare security update for org.springframework (25 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1...

CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...

CVE-2026-41701

A flaw was found in Spring AMQP. The system generates predictable correlation identifiers IDs for message replies due to an internal simple counter. This predictability could allow an attacker to potentially infer or manipulate message flows, leading to a low impact on the confidentiality and...

Spring Framework STOMP CSRF Vulnerability (CVE-2025-41254)

STOMP over WebSocket applications may be vulnerable to a security bypass that allows an attacker to send unauthorized messages. Affected Spring Products and VersionsSpring Framework:6.2.0 - 6.2.11, 6.1.0 - 6.1.23, 6.0.x - 6.0.29, 5.3.0 - 5.3.45, Older, unsupported versions are also affected...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC [CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC or WebFlux CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846. Spring MVC is used as part of our microservices. These vulnerabilities have been addressed. Please read the detail...