CLSA-2026-1789400252 TuxCare security update for org.springframework.ldap:spring-ldap-core (3 CVEs)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 3 CVEs. Fixed in 2.3.3.RELEASE-tuxcare.1...

CLSA-2026-1789146534 TuxCare security update for org.springframework.ldap:spring-ldap-core (2 CVEs)

TuxCare rebuilt org.springframework.ldap:spring-ldap-core to address 2 CVEs. Fixed in 2.4.1-tuxcare.2...

Incorrect Implementation of Authentication Algorithm

Overview org.springframework.ldap:spring-ldap-core is a maven plugin for LDAP for Sping. Affected versions of this package are vulnerable to Incorrect Implementation of Authentication Algorithm via LDAP authentication handling in DirContextAuthenticationStrategy implementations. An attacker can...

Sensitive Information Exposure

org.springframework.ldap:spring-ldap-core is vulnerable to Sensitive Information Exposure. The vulnerability is due to improper handling of case conversions using String.toLowerCase and String.toUpperCase methods, which can have locale-dependent exceptions. This may lead to unintended columns bei...