{"id":"CLSA-2026-1792326296","summary":"TuxCare security update for @next/react-refresh-utils (3 CVEs)","details":"TuxCare rebuilt @next/react-refresh-utils to address 3 CVEs. Fixed in 14.2.35-tuxcare.6.","modified":"2026-10-18T13:15:57.152727069Z","published":"2026-10-18T12:24:52Z","upstream":["CVE-2026-64646","CVE-2026-64647","CVE-2026-64648"],"affected":[{"package":{"name":"@next/react-refresh-utils","ecosystem":"TuxCare:npm","purl":"pkg:npm/%40next/react-refresh-utils"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"14.2.35-tuxcare.0"},{"fixed":"14.2.35-tuxcare.6"}]}],"versions":["14.2.35","14.2.35-tuxcare.4","14.2.35-tuxcare.5"],"database_specific":{"tuxcare":{"fixed_version":"14.2.35-tuxcare.6","base_version":"14.2.35"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792326296.json"}}],"schema_version":"1.9.0"}