{"id":"CVE-2025-22223","aliases":["CLSA-2026-1775694712","CLSA-2026-1793733149","CLSA-2026-1793887410","CLSA-2026-1793890661","CLSA-2026-1793892644","CLSA-2026-1794160019","CLSA-2026-1794175722","CLSA-2026-1794178065","CLSA-2026-1794179083","CLSA-2026-1794183984","CLSA-2026-1794189026","CLSA-2026-1794189800","EUVD-2025-7998","GHSA-hh3m-g4qj-4835"],"status":"published","title":"Spring Security Vulnerable to Authorization Bypass via Security Annotations","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00506,"percentile":0.43519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-290"],"published":"2025-03-24T17:42:49Z","modified":"2026-11-09T07:15:04Z","exploits":[{"source":"pocgithub","id":"1ucky7/cve-2025-22223-demo-1.0.0","title":"1ucky7/cve-2025-22223-demo-1.0.0","date":"2025-04-03","url":"https://github.com/1ucky7/cve-2025-22223-demo-1.0.0"}],"fixes":[{"ecosystem":"Maven","package":"org.springframework.security:spring-security-core","fixed_in":["6.4.4"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","fixed_in":["6.0.8-tuxcare.6","6.2.8-tuxcare.7","6.3.10-tuxcare.22","6.2.7-tuxcare.9","5.7.12-tuxcare.13","5.6.10-tuxcare.12","5.7.7-tuxcare.4"],"sources":["osv"]},{"ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","fixed_in":["6.0.8-tuxcare.6","6.2.8-tuxcare.7","6.3.10-tuxcare.22","6.2.7-tuxcare.9","5.7.12-tuxcare.13","5.6.10-tuxcare.12","5.7.7-tuxcare.4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"fixed":"6.4.4"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.3"},{"fixed":"6.4.3-tuxcare.1"}]}],"versions":["6.4.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.3"},{"fixed":"6.4.3-tuxcare.1"}]}],"versions":["6.4.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.3"},{"fixed":"6.4.3-tuxcare.1"}]}],"versions":["6.4.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.3"},{"fixed":"6.4.3-tuxcare.1"}]}],"versions":["6.4.3"],"bundled":5},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.6"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3","6.0.8-tuxcare.4","6.0.8-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.8"},{"fixed":"6.0.8-tuxcare.6"}]}],"versions":["6.0.8","6.0.8-tuxcare.1","6.0.8-tuxcare.2","6.0.8-tuxcare.3","6.0.8-tuxcare.4","6.0.8-tuxcare.5"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.8"},{"fixed":"6.2.8-tuxcare.7"}]}],"versions":["6.2.8","6.2.8-tuxcare.1","6.2.8-tuxcare.2","6.2.8-tuxcare.3","6.2.8-tuxcare.4","6.2.8-tuxcare.5","6.2.8-tuxcare.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.8"},{"fixed":"6.2.8-tuxcare.7"}]}],"versions":["6.2.8","6.2.8-tuxcare.1","6.2.8-tuxcare.2","6.2.8-tuxcare.3","6.2.8-tuxcare.4","6.2.8-tuxcare.5","6.2.8-tuxcare.6"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.22"}]}],"versions":["6.3.10","6.3.10-tuxcare.1","6.3.10-tuxcare.10","6.3.10-tuxcare.11","6.3.10-tuxcare.12","6.3.10-tuxcare.13","6.3.10-tuxcare.14","6.3.10-tuxcare.15","6.3.10-tuxcare.16","6.3.10-tuxcare.17","6.3.10-tuxcare.18","6.3.10-tuxcare.19","6.3.10-tuxcare.2","6.3.10-tuxcare.20","6.3.10-tuxcare.21","6.3.10-tuxcare.3","6.3.10-tuxcare.4","6.3.10-tuxcare.5","6.3.10-tuxcare.6","6.3.10-tuxcare.7","6.3.10-tuxcare.8","6.3.10-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.3.10"},{"fixed":"6.3.10-tuxcare.22"}]}],"versions":["6.3.10","6.3.10-tuxcare.1","6.3.10-tuxcare.10","6.3.10-tuxcare.11","6.3.10-tuxcare.12","6.3.10-tuxcare.13","6.3.10-tuxcare.14","6.3.10-tuxcare.15","6.3.10-tuxcare.16","6.3.10-tuxcare.17","6.3.10-tuxcare.18","6.3.10-tuxcare.19","6.3.10-tuxcare.2","6.3.10-tuxcare.20","6.3.10-tuxcare.21","6.3.10-tuxcare.3","6.3.10-tuxcare.4","6.3.10-tuxcare.5","6.3.10-tuxcare.6","6.3.10-tuxcare.7","6.3.10-tuxcare.8","6.3.10-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.7"},{"fixed":"6.2.7-tuxcare.9"}]}],"versions":["6.2.7","6.2.7-tuxcare.1","6.2.7-tuxcare.2","6.2.7-tuxcare.3","6.2.7-tuxcare.4","6.2.7-tuxcare.5","6.2.7-tuxcare.6","6.2.7-tuxcare.7","6.2.7-tuxcare.8"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.2.7"},{"fixed":"6.2.7-tuxcare.9"}]}],"versions":["6.2.7","6.2.7-tuxcare.1","6.2.7-tuxcare.2","6.2.7-tuxcare.3","6.2.7-tuxcare.4","6.2.7-tuxcare.5","6.2.7-tuxcare.6","6.2.7-tuxcare.7","6.2.7-tuxcare.8"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.12"},{"fixed":"5.7.12-tuxcare.13"}]}],"versions":["5.7.12","5.7.12-tuxcare.1","5.7.12-tuxcare.10","5.7.12-tuxcare.11","5.7.12-tuxcare.12","5.7.12-tuxcare.2","5.7.12-tuxcare.3","5.7.12-tuxcare.4","5.7.12-tuxcare.5","5.7.12-tuxcare.6","5.7.12-tuxcare.7","5.7.12-tuxcare.8","5.7.12-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.12"},{"fixed":"5.7.12-tuxcare.13"}]}],"versions":["5.7.12","5.7.12-tuxcare.1","5.7.12-tuxcare.10","5.7.12-tuxcare.11","5.7.12-tuxcare.12","5.7.12-tuxcare.2","5.7.12-tuxcare.3","5.7.12-tuxcare.4","5.7.12-tuxcare.5","5.7.12-tuxcare.6","5.7.12-tuxcare.7","5.7.12-tuxcare.8","5.7.12-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.5"},{"fixed":"5.6.5-tuxcare.2"}]}],"versions":["5.6.5","5.6.5-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.10"},{"fixed":"5.6.10-tuxcare.12"}]}],"versions":["5.6.10","5.6.10-tuxcare.1","5.6.10-tuxcare.10","5.6.10-tuxcare.11","5.6.10-tuxcare.2","5.6.10-tuxcare.3","5.6.10-tuxcare.4","5.6.10-tuxcare.5","5.6.10-tuxcare.6","5.6.10-tuxcare.7","5.6.10-tuxcare.8","5.6.10-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.10"},{"fixed":"5.6.10-tuxcare.12"}]}],"versions":["5.6.10","5.6.10-tuxcare.1","5.6.10-tuxcare.10","5.6.10-tuxcare.11","5.6.10-tuxcare.2","5.6.10-tuxcare.3","5.6.10-tuxcare.4","5.6.10-tuxcare.5","5.6.10-tuxcare.6","5.6.10-tuxcare.7","5.6.10-tuxcare.8","5.6.10-tuxcare.9"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.5"}]}],"versions":["5.6.7","5.6.7-tuxcare.1","5.6.7-tuxcare.2","5.6.7-tuxcare.3","5.6.7-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.6.7"},{"fixed":"5.6.7-tuxcare.5"}]}],"versions":["5.6.7","5.6.7-tuxcare.1","5.6.7-tuxcare.2","5.6.7-tuxcare.3","5.6.7-tuxcare.4"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.4"}]}],"versions":["5.7.7","5.7.7-tuxcare.1","5.7.7-tuxcare.2","5.7.7-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.7"},{"fixed":"5.7.7-tuxcare.4"}]}],"versions":["5.7.7","5.7.7-tuxcare.1","5.7.7-tuxcare.2","5.7.7-tuxcare.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.7.6"},{"fixed":"5.7.6-tuxcare.2"}]}],"versions":["5.7.6","5.7.6-tuxcare.1"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-ldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-oauth2-jose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-saml2-service-provider","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.springframework.security:spring-security-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.5"},{"fixed":"6.1.5-tuxcare.3"}]}],"versions":["6.1.5","6.1.5-tuxcare.1","6.1.5-tuxcare.2"],"bundled":14},{"source":"osv","ecosystem":"Maven","package":"org.springframework.security:spring-security-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.4.0"},{"fixed":"6.4.4"}]}],"versions":["6.4.0","6.4.1","6.4.2","6.4.3"]}],"products":[{"vendor":"spring","product":"spring security"}],"references":[{"url":"https://spring.io/security/cve-2025-22223","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22223","tags":["advisory"]},{"url":"https://github.com/spring-projects/spring-security/commit/dc2e1af2dab8ef81cd4edd25b56a2babeaab8cf9","tags":["web"]},{"url":"https://github.com/advisories/GHSA-hh3m-g4qj-4835"},{"url":"https://github.com/spring-projects/spring-security","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-22223","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","status":"published","published":"2025-03-24T17:42:49.634Z","modified":"2025-03-24T18:06:24.575Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:32:29.286772Z"}],"euvd":[{"id":"EUVD-2025-7998","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","status":"published","published":"2025-03-24T17:42:49Z","modified":"2025-03-24T18:06:24Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:54.592858Z"}],"ghsa":[{"id":"GHSA-hh3m-g4qj-4835","title":"Spring Security Vulnerable to Authorization Bypass via Security Annotations","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","status":"published","published":"2025-03-24T18:31:03Z","modified":"2025-03-24T21:20:54Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:38:36.51789Z"}],"nvd":[{"id":"CVE-2025-22223","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or\nyou do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","status":"published","published":"2025-03-24T18:15:22.673Z","modified":"2026-06-17T08:45:42.9Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T14:10:55.858901Z"}],"osv":[{"id":"GHSA-hh3m-g4qj-4835","title":"Spring Security Vulnerable to Authorization Bypass via Security Annotations","description":"Spring Security 6.4.0 - 6.4.3 may not correctly locate method security annotations on parameterized types or methods. This may cause an authorization bypass. \n\nYou are not affected if you are not using @EnableMethodSecurity, or you do not have method security annotations on parameterized types or methods, or all method security annotations are attached to target methods","status":"published","published":"2025-03-24T18:31:03Z","modified":"2026-08-07T08:12:11.197003801Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-290"],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"CLSA-2026-1775694712","title":"TuxCare security update for org.springframework.security (5 CVEs)","description":"TuxCare rebuilt 4 org.springframework.security packages to address 5 CVEs. Fixed in 6.4.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:23Z","modified":"2026-11-02T19:45:20.39156813Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1793733149","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 6.0.8-tuxcare.6.","status":"published","published":"2026-11-03T20:12:30Z","modified":"2026-11-04T02:30:02.673258661Z","updated_at":"2026-11-04T02:55:01.518827Z"},{"id":"CLSA-2026-1793887410","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 6.2.8-tuxcare.7.","status":"published","published":"2026-11-05T15:03:31Z","modified":"2026-11-06T13:15:21.600459692Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793890661","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 6.3.10-tuxcare.22.","status":"published","published":"2026-11-05T15:57:42Z","modified":"2026-11-06T13:15:21.617864234Z","updated_at":"2026-11-06T13:44:09.891978Z"},{"id":"CLSA-2026-1793892644","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 6.2.7-tuxcare.9.","status":"published","published":"2026-11-05T16:30:45Z","modified":"2026-11-06T13:15:08.677355042Z","updated_at":"2026-11-06T13:44:21.739016Z"},{"id":"CLSA-2026-1794160019","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 5.7.12-tuxcare.13.","status":"published","published":"2026-11-08T18:47:00Z","modified":"2026-11-09T01:45:04.239723946Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794175722","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 6 org.springframework.security packages to address 14 CVEs. Fixed in 5.6.5-tuxcare.2.","status":"published","published":"2026-11-08T23:08:43Z","modified":"2026-11-09T01:45:02.285308078Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794178065","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 5.6.10-tuxcare.12.","status":"published","published":"2026-11-08T23:47:46Z","modified":"2026-11-09T01:45:02.28491262Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794179083","title":"TuxCare security update for org.springframework.security (2 CVEs)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 2 CVEs. Fixed in 5.6.7-tuxcare.5.","status":"published","published":"2026-11-09T00:04:44Z","modified":"2026-11-09T01:45:03.258441781Z","updated_at":"2026-11-09T02:15:19.582074Z"},{"id":"CLSA-2026-1794183984","title":"TuxCare security update for org.springframework.security (1 CVE)","description":"TuxCare rebuilt 2 org.springframework.security packages to address 1 CVE. Fixed in 5.7.7-tuxcare.4.","status":"published","published":"2026-11-09T01:26:25Z","modified":"2026-11-09T07:15:04.288719659Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794189026","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 6 org.springframework.security packages to address 14 CVEs. Fixed in 5.7.6-tuxcare.2.","status":"published","published":"2026-11-09T02:50:27Z","modified":"2026-11-09T07:15:04.238231713Z","updated_at":"2026-11-09T07:20:29.20536Z"},{"id":"CLSA-2026-1794189800","title":"TuxCare security update for org.springframework.security (14 CVEs)","description":"TuxCare rebuilt 7 org.springframework.security packages to address 14 CVEs. Fixed in 6.1.5-tuxcare.3.","status":"published","published":"2026-11-09T03:03:20Z","modified":"2026-11-09T07:15:04.228555714Z","updated_at":"2026-11-09T07:20:29.20536Z"}]}}