{"id":"CLSA-2026-1788772364","summary":"TuxCare security update for org.springframework (2 CVEs)","details":"TuxCare rebuilt 2 org.springframework packages to address 2 CVEs. Fixed in 3.0.5.RELEASE-tuxcare.11.","modified":"2026-11-02T19:46:09.684028395Z","published":"2026-09-07T09:12:44Z","upstream":["CVE-2022-22970","CVE-2026-41849"],"affected":[{"package":{"name":"org.springframework:spring-beans","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework/spring-beans"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.11"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.10","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7","3.0.5.RELEASE-tuxcare.8","3.0.5.RELEASE-tuxcare.9"],"database_specific":{"tuxcare":{"base_version":"3.0.5.RELEASE","fixed_version":"3.0.5.RELEASE-tuxcare.11"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788772364.json"}},{"package":{"name":"org.springframework:spring-expression","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework/spring-expression"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.5.RELEASE"},{"fixed":"3.0.5.RELEASE-tuxcare.11"}]}],"versions":["3.0.5.RELEASE","3.0.5.RELEASE-tuxcare.1","3.0.5.RELEASE-tuxcare.10","3.0.5.RELEASE-tuxcare.2","3.0.5.RELEASE-tuxcare.3","3.0.5.RELEASE-tuxcare.4","3.0.5.RELEASE-tuxcare.5","3.0.5.RELEASE-tuxcare.6","3.0.5.RELEASE-tuxcare.7","3.0.5.RELEASE-tuxcare.8","3.0.5.RELEASE-tuxcare.9"],"database_specific":{"tuxcare":{"base_version":"3.0.5.RELEASE","fixed_version":"3.0.5.RELEASE-tuxcare.11"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1788772364.json"}}],"schema_version":"1.9.2"}