{"id":"CLSA-2026-1784509823","summary":"TuxCare security update for lodash (3 CVEs)","details":"TuxCare rebuilt lodash to address 3 CVEs. Fixed in 4.17.4-tuxcare.2.","modified":"2026-10-15T09:45:58.437149211Z","published":"2026-08-04T14:52:45Z","upstream":["CVE-2018-16487","CVE-2019-1010266","CVE-2019-10744"],"affected":[{"package":{"name":"lodash","ecosystem":"TuxCare:npm","purl":"pkg:npm/lodash"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.17.4-tuxcare.0"},{"fixed":"4.17.4-tuxcare.2"}]}],"versions":["4.17.4","4.17.4-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1784509823.json","tuxcare":{"base_version":"4.17.4","fixed_version":"4.17.4-tuxcare.2"}}}],"schema_version":"1.9.0"}