{"id":"CLSA-2026-1792161492","summary":"TuxCare security update for dompurify (10 CVEs)","details":"TuxCare rebuilt dompurify to address 10 CVEs. Fixed in 3.2.6-tuxcare.2.","modified":"2026-10-16T16:30:09.033084778Z","published":"2026-10-16T14:38:11Z","upstream":["CVE-2025-15599","CVE-2026-0540","CVE-2026-41239","CVE-2026-49458","CVE-2026-49459","CVE-2026-65898","CVE-2026-65899","CVE-2026-65913","CVE-2026-65914","CVE-2026-66010"],"affected":[{"package":{"name":"dompurify","ecosystem":"TuxCare:npm","purl":"pkg:npm/dompurify"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.2.6-tuxcare.0"},{"fixed":"3.2.6-tuxcare.2"}]}],"versions":["3.2.6","3.2.6-tuxcare.1"],"database_specific":{"tuxcare":{"base_version":"3.2.6","fixed_version":"3.2.6-tuxcare.2"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792161492.json"}}],"schema_version":"1.9.0"}