{"id":"CLSA-2026-1791988475","summary":"TuxCare security update for org.springframework.data (2 CVEs)","details":"TuxCare rebuilt 5 org.springframework.data packages to address 2 CVEs. Fixed in 3.7.18-tuxcare.9.","modified":"2026-10-15T09:45:54.230261437Z","published":"2026-10-14T14:34:35Z","upstream":["CVE-2026-41728","CVE-2026-47850"],"affected":[{"package":{"name":"org.springframework.data:spring-data-rest-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.data/spring-data-rest-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.18"},{"fixed":"3.7.18-tuxcare.9"}]}],"versions":["3.7.18","3.7.18-tuxcare.1","3.7.18-tuxcare.2","3.7.18-tuxcare.3","3.7.18-tuxcare.4","3.7.18-tuxcare.5","3.7.18-tuxcare.6","3.7.18-tuxcare.7","3.7.18-tuxcare.8","3.7.18.tuxcare"],"database_specific":{"tuxcare":{"fixed_version":"3.7.18-tuxcare.9","base_version":"3.7.18"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1791988475.json"}},{"package":{"name":"org.springframework.data:spring-data-rest-distribution","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.data/spring-data-rest-distribution"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.18"},{"fixed":"3.7.18-tuxcare.9"}]}],"versions":["3.7.18","3.7.18-tuxcare.1","3.7.18-tuxcare.2","3.7.18-tuxcare.3","3.7.18-tuxcare.4","3.7.18-tuxcare.5","3.7.18-tuxcare.6","3.7.18-tuxcare.7","3.7.18-tuxcare.8","3.7.18.tuxcare"],"database_specific":{"tuxcare":{"base_version":"3.7.18","fixed_version":"3.7.18-tuxcare.9"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1791988475.json"}},{"package":{"name":"org.springframework.data:spring-data-rest-hal-explorer","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.data/spring-data-rest-hal-explorer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.18"},{"fixed":"3.7.18-tuxcare.9"}]}],"versions":["3.7.18","3.7.18-tuxcare.1","3.7.18-tuxcare.2","3.7.18-tuxcare.3","3.7.18-tuxcare.4","3.7.18-tuxcare.5","3.7.18-tuxcare.6","3.7.18-tuxcare.7","3.7.18-tuxcare.8","3.7.18.tuxcare"],"database_specific":{"tuxcare":{"base_version":"3.7.18","fixed_version":"3.7.18-tuxcare.9"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1791988475.json"}},{"package":{"name":"org.springframework.data:spring-data-rest-parent","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.data/spring-data-rest-parent"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.18"},{"fixed":"3.7.18-tuxcare.9"}]}],"versions":["3.7.18","3.7.18-tuxcare.1","3.7.18-tuxcare.2","3.7.18-tuxcare.3","3.7.18-tuxcare.4","3.7.18-tuxcare.5","3.7.18-tuxcare.6","3.7.18-tuxcare.7","3.7.18-tuxcare.8","3.7.18.tuxcare"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1791988475.json","tuxcare":{"fixed_version":"3.7.18-tuxcare.9","base_version":"3.7.18"}}},{"package":{"name":"org.springframework.data:spring-data-rest-webmvc","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.data/spring-data-rest-webmvc"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.7.18"},{"fixed":"3.7.18-tuxcare.9"}]}],"versions":["3.7.18","3.7.18-tuxcare.1","3.7.18-tuxcare.2","3.7.18-tuxcare.3","3.7.18-tuxcare.4","3.7.18-tuxcare.5","3.7.18-tuxcare.6","3.7.18-tuxcare.7","3.7.18-tuxcare.8","3.7.18.tuxcare"],"database_specific":{"tuxcare":{"base_version":"3.7.18","fixed_version":"3.7.18-tuxcare.9"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1791988475.json"}}],"schema_version":"1.9.0"}