PT-2026-86126 · Tuxcare · Org.Springframework.Security:Spring-Security-Acl+17

Published

2026-08-25

·

Updated

2026-08-25

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
TuxCare rebuilt 18 org.springframework.security packages to address 2 CVEs. Fixed in 6.0.8-tuxcare.2.
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

CLSA-2026-1787649513

Affected Products

Org.Springframework.Security:Spring-Security-Acl
Org.Springframework.Security:Spring-Security-Aspects
Org.Springframework.Security:Spring-Security-Bom
Org.Springframework.Security:Spring-Security-Config
Org.Springframework.Security:Spring-Security-Core
Org.Springframework.Security:Spring-Security-Crypto
Org.Springframework.Security:Spring-Security-Data
Org.Springframework.Security:Spring-Security-Ldap
Org.Springframework.Security:Spring-Security-Messaging
Org.Springframework.Security:Spring-Security-Oauth2-Client
Org.Springframework.Security:Spring-Security-Oauth2-Core
Org.Springframework.Security:Spring-Security-Oauth2-Jose
Org.Springframework.Security:Spring-Security-Oauth2-Resource-Server
Org.Springframework.Security:Spring-Security-Rsocket
Org.Springframework.Security:Spring-Security-Saml2-Service-Provider
Org.Springframework.Security:Spring-Security-Taglibs
Org.Springframework.Security:Spring-Security-Test
Org.Springframework.Security:Spring-Security-Web