{"id":"CLSA-2026-1788508031","summary":"TuxCare security update for org.springframework.ws (2 CVEs)","details":"TuxCare rebuilt 2 org.springframework.ws packages to address 2 CVEs. Fixed in 4.0.17-tuxcare.5.","modified":"2026-11-02T19:46:09.073386993Z","published":"2026-09-04T07:47:11Z","upstream":["CVE-2026-40998","CVE-2026-40999"],"affected":[{"package":{"name":"org.springframework.ws:spring-ws-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ws/spring-ws-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.17"},{"fixed":"4.0.17-tuxcare.5"}]}],"versions":["4.0.17","4.0.17-tuxcare.1","4.0.17-tuxcare.2","4.0.17-tuxcare.3","4.0.17-tuxcare.4"],"database_specific":{"tuxcare":{"fixed_version":"4.0.17-tuxcare.5","base_version":"4.0.17"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788508031.json"}},{"package":{"name":"org.springframework.ws:spring-xml","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ws/spring-xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.17"},{"fixed":"4.0.17-tuxcare.5"}]}],"versions":["4.0.17","4.0.17-tuxcare.1","4.0.17-tuxcare.2","4.0.17-tuxcare.3","4.0.17-tuxcare.4"],"database_specific":{"tuxcare":{"base_version":"4.0.17","fixed_version":"4.0.17-tuxcare.5"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788508031.json"}}],"schema_version":"1.9.2"}