10249 matches found
CLSA-2025-1761696401 TuxCare security update for org.springframework (8 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 8 CVEs. Fixed in 5.3.31-tuxcare.1...
CLSA-2025-1760313981 TuxCare security update for org.springframework (25 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 25 CVEs. Fixed in 4.0.0.RELEASE-tuxcare.1...
CLSA-2025-1760313986 TuxCare security update for org.springframework (29 CVEs)
TuxCare rebuilt 21 org.springframework packages to address 29 CVEs. Fixed in 3.1.1.RELEASE-tuxcare.1...
CLSA-2025-1759190769 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.8...
CLSA-2025-1759795580 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 25 org.springframework packages to address 1 CVE. Fixed in 6.1.21-tuxcare.1...
CLSA-2025-1761523598 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39-tuxcare.9...
CLSA-2025-1756425960 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 6.0.23-tuxcare.1...
CLSA-2025-1760313987 TuxCare security update for org.springframework.webflow (2 CVEs)
TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.1.RELEASE-tuxcare.1...
CLSA-2025-1752019358 TuxCare security update for org.springframework.boot (5 CVEs)
TuxCare rebuilt 77 org.springframework.boot packages to address 5 CVEs. Fixed in 2.4.6.tuxcare.2...
CLSA-2025-1751328209 TuxCare security update for org.springframework (7 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 7 CVEs. Fixed in 5.3.27.tuxcare.1...
CLSA-2025-1755561852 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18-tuxcare.8...
CLSA-2025-1754006610 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 75 org.springframework.boot packages to address 1 CVE. Fixed in 2.6.15.tuxcare.1...
CLSA-2025-1742947247 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.8.16.tuxcare...
CLSA-2025-1743120048 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39.tuxcare.4...
CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)
TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...
CLSA-2024-1727308812 TuxCare security update for org.springframework.security (1 CVE)
TuxCare rebuilt 21 org.springframework.security packages to address 1 CVE. Fixed in 5.7.11.tuxcare...
CLSA-2024-1727308813 TuxCare security update for org.springframework (2 CVEs)
TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.31.tuxcare...
K000162757: Spring Security vulnerability CVE-2026-47838
Security Advisory Description SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong value for the username. In a carefully crafted certificate, this can lead to an attacker impersonating another user. Affected...
SpEL Expression Injection
Spring Data REST is vulnerable to SpEL expression injection through map-typed properties when processing JSON Patch requests. The vulnerability is due to the JSON Pointer path segment used as the map key being embedded directly into a SpEL expression without sanitization or validation, where...
opentaint star-history/latest
The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...