{"id":"CLSA-2026-1790950271","summary":"TuxCare security update for js-yaml (2 CVEs)","details":"TuxCare rebuilt js-yaml to address 2 CVEs. Fixed in 4.1.0-tuxcare.4.","modified":"2026-10-02T19:15:02.951253228Z","published":"2026-10-02T14:11:11Z","upstream":["CVE-2026-59870","CVE-2026-84375"],"affected":[{"package":{"name":"js-yaml","ecosystem":"TuxCare:npm","purl":"pkg:npm/js-yaml"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.0-tuxcare.4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1790950271.json"}}],"schema_version":"1.9.0"}