{"id":"CLSA-2026-1789150088","summary":"TuxCare security update for org.springframework.graphql (6 CVEs)","details":"TuxCare rebuilt 2 org.springframework.graphql packages to address 6 CVEs. Fixed in 1.3.7-tuxcare.4.","modified":"2026-09-12T02:00:03.998802737Z","published":"2026-09-11T18:08:08Z","upstream":["CVE-2026-41699","CVE-2026-41700","CVE-2026-41856","CVE-2026-59286","CVE-2026-59288","CVE-2026-59289"],"affected":[{"package":{"name":"org.springframework.graphql:spring-graphql","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.graphql/spring-graphql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789150088.json"}},{"package":{"name":"org.springframework.graphql:spring-graphql-test","ecosystem":"TuxCare:Maven","purl":"pkg:maven/org.springframework.graphql/spring-graphql-test"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1789150088.json"}}],"schema_version":"1.9.0"}