Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Spring Data Commons could let attackers bypass security
published 3 months ago
Summary
The Spring Data Commons library in your applications has two flaws that could let a malicious user get around security controls. To protect your system, install the updated version provided by TuxCare (2.7.18-tuxcare.3) as soon as possible. Updating fixes the problems and keeps your data safe.
What to do
- Update springframework org.springframework.data:spring-data-commons to version 2.7.18-tuxcare.3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Maven | springframework | org.springframework.data:spring-data-commons |
>= 2.7.18, < 2.7.18-tuxcare.3 Fix: upgrade to 2.7.18-tuxcare.3
|
Original advisory text
TuxCare security update for org.springframework.data:spring-data-commons (2 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-commons to address 2 CVEs. Fixed in 2.7.18-tuxcare.3.
Timeline
Published4 Aug 2026
Updated15 Oct 2026
First seen15 Oct 2026
Sources
CLSA-2026-1781830582 · OSV
Track software like this
Free during beta