{"id":"CLSA-2026-1775003161","summary":"TuxCare security update for nodemailer (6 CVEs)","details":"TuxCare rebuilt nodemailer to address 6 CVEs. Fixed in 2.7.2-tuxcare.1.","modified":"2026-10-15T09:47:49.355745173Z","published":"2026-08-04T14:52:18Z","upstream":["CVE-2020-7769","CVE-2021-23400","CVE-2025-13033","CVE-2025-14874","GHSA-9h6g-pr28-7cqp","GHSA-rcmh-qjqh-p98v"],"affected":[{"package":{"name":"nodemailer","ecosystem":"TuxCare:npm","purl":"pkg:npm/nodemailer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.7.2-tuxcare.0"},{"fixed":"2.7.2-tuxcare.1"}]}],"versions":["2.7.2"],"database_specific":{"tuxcare":{"base_version":"2.7.2","fixed_version":"2.7.2-tuxcare.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1775003161.json"}}],"schema_version":"1.9.0"}