{"id":"CLSA-2026-1793889628","summary":"TuxCare security update for org.springframework.ws (5 CVEs)","details":"TuxCare rebuilt 3 org.springframework.ws packages to address 5 CVEs. Fixed in 4.0.16-tuxcare.2.","modified":"2026-11-06T13:15:21.602768162Z","published":"2026-11-05T15:40:29Z","upstream":["CVE-2026-40994","CVE-2026-40995","CVE-2026-40996","CVE-2026-40998","CVE-2026-40999"],"affected":[{"package":{"name":"org.springframework.ws:spring-ws-core","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ws/spring-ws-core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.16"},{"fixed":"4.0.16-tuxcare.2"}]}],"versions":["4.0.16","4.0.16-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"4.0.16","fixed_version":"4.0.16-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793889628.json"}},{"package":{"name":"org.springframework.ws:spring-ws-security","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ws/spring-ws-security"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.16"},{"fixed":"4.0.16-tuxcare.2"}]}],"versions":["4.0.16","4.0.16-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"4.0.16","fixed_version":"4.0.16-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793889628.json"}},{"package":{"name":"org.springframework.ws:spring-xml","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.ws/spring-xml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.16"},{"fixed":"4.0.16-tuxcare.2"}]}],"versions":["4.0.16","4.0.16-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"4.0.16","fixed_version":"4.0.16-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1793889628.json"}}],"schema_version":"1.9.2"}