{"id":"CLSA-2026-1792231273","summary":"TuxCare security update for devalue (2 CVEs)","details":"TuxCare rebuilt devalue to address 2 CVEs. Fixed in 5.9.1-tuxcare.2.","modified":"2026-10-17T13:09:26.485987803Z","published":"2026-10-17T10:01:13Z","upstream":["CVE-2026-81176","GHSA-wf3x-273g-mvxv"],"affected":[{"package":{"name":"devalue","ecosystem":"TuxCare:npm","purl":"pkg:npm/devalue"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.9.1-tuxcare.0"},{"fixed":"5.9.1-tuxcare.2"}]}],"versions":["5.9.1","5.9.1-tuxcare.1"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792231273.json","tuxcare":{"base_version":"5.9.1","fixed_version":"5.9.1-tuxcare.2"}}}],"schema_version":"1.9.0"}