{"id":"CLSA-2026-1791666589","summary":"TuxCare security update for devalue (3 CVEs)","details":"TuxCare rebuilt devalue to address 3 CVEs. Fixed in 4.3.2-tuxcare.4.","modified":"2026-10-15T09:46:04.087648378Z","published":"2026-10-10T21:09:49Z","upstream":["GHSA-4q55-j62x-fr9h","GHSA-mcm9-63f2-9j32","GHSA-wf3x-273g-mvxv"],"affected":[{"package":{"name":"devalue","ecosystem":"TuxCare:npm","purl":"pkg:npm/devalue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.3.2-tuxcare.0"},{"fixed":"4.3.2-tuxcare.4"}]}],"versions":["4.3.2","4.3.2-tuxcare.1","4.3.2-tuxcare.2","4.3.2-tuxcare.3"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1791666589.json","tuxcare":{"fixed_version":"4.3.2-tuxcare.4","base_version":"4.3.2"}}}],"schema_version":"1.9.0"}