CLSA-2025-1750809964 TuxCare security update for dom4j:dom4j (2 CVEs)

TuxCare rebuilt dom4j:dom4j to address 2 CVEs. Fixed in 1.6.1.tuxcare.1...

CLSA-2025-1761005192 TuxCare security update for net.minidev (1 CVE)

TuxCare rebuilt 2 net.minidev packages to address 1 CVE. Fixed in 1.3.2-tuxcare.1...

CLSA-2025-1760918790 TuxCare security update for com.google.code.gson:gson (1 CVE)

TuxCare rebuilt com.google.code.gson:gson to address 1 CVE. Fixed in 2.9.1-tuxcare.1...

CLSA-2025-1759709173 TuxCare security update for commons-lang:commons-lang (1 CVE)

TuxCare rebuilt commons-lang:commons-lang to address 1 CVE. Fixed in 2.6-tuxcare.1...

CLSA-2025-1756425960 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 6.0.23-tuxcare.1...

CLSA-2025-1756080325 TuxCare security update for com.google.protobuf:protobuf-java (2 CVEs)

TuxCare rebuilt com.google.protobuf:protobuf-java to address 2 CVEs. Fixed in 2.5.0-tuxcare.1...

CLSA-2025-1761005191 TuxCare security update for com.lowagie:itext (1 CVE)

TuxCare rebuilt com.lowagie:itext to address 1 CVE. Fixed in 2.1.7-tuxcare.1...

CLSA-2025-1760313987 TuxCare security update for org.springframework.webflow (2 CVEs)

TuxCare rebuilt 5 org.springframework.webflow packages to address 2 CVEs. Fixed in 2.3.1.RELEASE-tuxcare.1...

CLSA-2025-1759795577 TuxCare security update for commons-io:commons-io (1 CVE)

TuxCare rebuilt commons-io:commons-io to address 1 CVE. Fixed in 2.7-tuxcare.1...

CLSA-2025-1762474004 TuxCare security update for 59 packages (1 CVE)

TuxCare rebuilt 59 packages to address 1 CVE. Fixed in 2.7.3.tuxcare.1...

CLSA-2025-1751328156 TuxCare security update for 37 packages (1 CVE)

TuxCare rebuilt 37 packages to address 1 CVE. Fixed in 2.3.9.tuxcare.1...

CLSA-2025-1752710588 TuxCare security update for ch.qos.logback (2 CVEs)

TuxCare rebuilt 2 ch.qos.logback packages to address 2 CVEs. Fixed in 1.2.13.tuxcare...

CLSA-2024-1723507378 TuxCare security update for com.nimbusds:nimbus-jose-jwt (1 CVE)

TuxCare rebuilt com.nimbusds:nimbus-jose-jwt to address 1 CVE. Fixed in 9.22.tuxcare...

CLSA-2025-1752019359 TuxCare security update for 58 packages (1 CVE)

TuxCare rebuilt 58 packages to address 1 CVE. Fixed in 2.7.1.tuxcare.1...

CLSA-2025-1752019363 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 31.1-jre.tuxcare.1...

CLSA-2025-1752019395 TuxCare security update for org.apache.kafka (5 CVEs)

TuxCare rebuilt 47 org.apache.kafka packages to address 5 CVEs. Fixed in 3.2.3.tuxcare.1...

CLSA-2025-1738627240 TuxCare security update for org.springframework.boot (1 CVE)

TuxCare rebuilt 76 org.springframework.boot packages to address 1 CVE. Fixed in 2.7.18.tuxcare.4...

CLSA-2024-1726444801 TuxCare security update for com.google.guava (2 CVEs)

TuxCare rebuilt 5 com.google.guava packages to address 2 CVEs. Fixed in 30.1-jre.tuxcare...

CVE-2026-67247

creationtimestamp| type| source ---|---|--- 2026-08-04 14:27:48+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3msb7ureywf25 2026-08-04 14:59:23+00:00| seen| https://bsky.app/profile/potato.software/post/3msbbnaqvro2i...

GHSA-R745-8HWV-H473 Flowise: Unauthenticated OAuth2 Refresh Enables Non-Blind SSRF and Secret Exfiltration

Summary The OAuth2 token refresh endpoint POST /api/v1/oauth2-credential/refresh/:credentialId is unauthenticated by design it is in the public whitelist and performs a server-side HTTP request to a credential-controlled URL accessTokenUrl without SSRF protections. In runtime validation, this...