{"id":"CLEANSTART-2026-TH02378","summary":"Security fixes in npm 11.14.0-r4","details":"Package npm version 11.14.0-r4 fixes 8 vulnerabilities: ghsa-vxpw-j846-p89q, ghsa-p88m-4jfj-68fv, ghsa-g8m3-5g58-fq7m, ghsa-35p6-xmwp-9g52, CVE-2026-12151...","modified":"2026-09-18T12:17:41.529065382Z","published":"2026-07-30T07:10:53Z","withdrawn":"2026-09-18T11:59:01.768079Z","upstream":["CVE-2026-11525","CVE-2026-12151","CVE-2026-6733","CVE-2026-9679","ghsa-35p6-xmwp-9g52","ghsa-g8m3-5g58-fq7m","ghsa-p88m-4jfj-68fv","ghsa-vxpw-j846-p89q"],"database_specific":{},"references":[{"type":"WEB","url":"https://www.npmjs.com/"}],"affected":[{"package":{"name":"npm","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.14.0-r4"}]}],"versions":["11.14.0-r4"],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TH02378.json"}}],"schema_version":"1.9.0"}