{"id":"CLSA-2026-1774313530","summary":"TuxCare security update for craftcms/cms (10 CVEs)","details":"TuxCare rebuilt craftcms/cms to address 10 CVEs. Fixed in 3.9.15-p1+tuxcare.","modified":"2026-08-07T10:02:56.999754791Z","published":"2026-08-04T14:52:36Z","upstream":["AIKIDO-2025-10090","AIKIDO-2025-10859","CVE-2023-33495","CVE-2024-52291","CVE-2025-35939","CVE-2025-54417","CVE-2025-68456","CVE-2026-25493","CVE-2026-25495","CVE-2026-27128"],"affected":[{"package":{"name":"craftcms/cms","ecosystem":"TuxCare:Packagist","purl":"pkg:composer/craftcms/cms"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.15-p1+tuxcare"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1774313530.json"}}],"schema_version":"1.8.0"}