{"id":"CLSA-2026-1794185565","summary":"TuxCare security update for org.springframework.security:spring-security-oauth2-jose (1 CVE)","details":"TuxCare rebuilt org.springframework.security:spring-security-oauth2-jose to address 1 CVE. Fixed in 6.3.10-tuxcare.23.","modified":"2026-11-09T07:15:04.227043139Z","published":"2026-11-09T01:52:46Z","upstream":["CVE-2026-22748"],"affected":[{"package":{"name":"org.springframework.security:spring-security-oauth2-jose","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.security/spring-security-oauth2-jose"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.23"}]}],"versions":["6.3.10","6.3.10-tuxcare.1","6.3.10-tuxcare.10","6.3.10-tuxcare.11","6.3.10-tuxcare.12","6.3.10-tuxcare.13","6.3.10-tuxcare.14","6.3.10-tuxcare.15","6.3.10-tuxcare.16","6.3.10-tuxcare.17","6.3.10-tuxcare.18","6.3.10-tuxcare.19","6.3.10-tuxcare.2","6.3.10-tuxcare.20","6.3.10-tuxcare.21","6.3.10-tuxcare.22","6.3.10-tuxcare.3","6.3.10-tuxcare.4","6.3.10-tuxcare.5","6.3.10-tuxcare.6","6.3.10-tuxcare.7","6.3.10-tuxcare.8","6.3.10-tuxcare.9"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794185565.json","tuxcare":{"base_version":"6.3.10","fixed_version":"6.3.10-tuxcare.23"}}}],"schema_version":"1.9.2"}