{"id":"CLSA-2026-1791626432","summary":"TuxCare security update for devalue (3 CVEs)","details":"TuxCare rebuilt devalue to address 3 CVEs. Fixed in 4.3.0-tuxcare.4.","modified":"2026-10-15T09:48:04.526595791Z","published":"2026-10-10T10:00:32Z","upstream":["GHSA-4q55-j62x-fr9h","GHSA-mcm9-63f2-9j32","GHSA-wf3x-273g-mvxv"],"affected":[{"package":{"name":"devalue","ecosystem":"TuxCare:npm","purl":"pkg:npm/devalue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.0-tuxcare.0"},{"fixed":"4.3.0-tuxcare.4"}]}],"versions":["4.3.0","4.3.0-tuxcare.1","4.3.0-tuxcare.2","4.3.0-tuxcare.3"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1791626432.json","tuxcare":{"base_version":"4.3.0","fixed_version":"4.3.0-tuxcare.4"}}}],"schema_version":"1.9.0"}