{"id":"CLSA-2026-1774313530","summary":"TuxCare security update for craftcms/cms (10 CVEs)","details":"TuxCare rebuilt craftcms/cms to address 10 CVEs. Fixed in 3.9.15-p1+tuxcare.","modified":"2026-10-15T09:47:59.588321197Z","published":"2026-08-04T14:52:36Z","upstream":["AIKIDO-2025-10090","AIKIDO-2025-10859","CVE-2023-33495","CVE-2024-52291","CVE-2025-35939","CVE-2025-54417","CVE-2025-68456","CVE-2026-25493","CVE-2026-25495","CVE-2026-27128"],"affected":[{"package":{"name":"craftcms/cms","ecosystem":"TuxCare:Packagist","purl":"pkg:composer/craftcms/cms"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.9.15"},{"fixed":"3.9.15-p1+tuxcare"}]}],"versions":["3.9.15"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1774313530.json","tuxcare":{"base_version":"3.9.15","fixed_version":"3.9.15-p1+tuxcare"}}}],"schema_version":"1.9.0"}