{"id":"CLSA-2026-1776904635","summary":"TuxCare security update for 11 packages (2 CVEs)","details":"TuxCare rebuilt 11 packages to address 2 CVEs. Fixed in 3.2.0-tuxcare.2.","modified":"2026-10-15T09:45:47.188961105Z","published":"2026-08-04T14:52:27Z","upstream":["CVE-2020-8203","CVE-2026-4800"],"affected":[{"package":{"name":"lodash","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash._basematches","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash._basematches"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"3.2.0","fixed_version":"3.2.0-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash._createwrapper","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash._createwrapper"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json","tuxcare":{"base_version":"3.2.0","fixed_version":"3.2.0-tuxcare.2"}}},{"package":{"name":"lodash.endswith","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.endswith"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json","tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"}}},{"package":{"name":"lodash.escape","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.escape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash.isplainobject","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.isplainobject"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash.parseint","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.parseint"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash.startswith","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.startswith"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash.unescape","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.unescape"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json"}},{"package":{"name":"lodash.uniqueid","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.uniqueid"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json","tuxcare":{"base_version":"3.2.0","fixed_version":"3.2.0-tuxcare.2"}}},{"package":{"name":"lodash.words","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash.words"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.0-tuxcare.0"},{"fixed":"3.2.0-tuxcare.2"}]}],"versions":["3.2.0","3.2.0-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776904635.json","tuxcare":{"fixed_version":"3.2.0-tuxcare.2","base_version":"3.2.0"}}}],"schema_version":"1.9.0"}