{"id":"CLSA-2026-1792486145","summary":"TuxCare security update for nodemailer (2 CVEs)","details":"TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 9.0.3-tuxcare.4.","modified":"2026-10-20T13:45:03.956670570Z","published":"2026-10-20T08:49:05Z","upstream":["CVE-2026-110869","CVE-2026-110872"],"affected":[{"package":{"name":"nodemailer","ecosystem":"TuxCare:npm","purl":"pkg:npm/nodemailer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.0.3-tuxcare.0"},{"fixed":"9.0.3-tuxcare.4"}]}],"versions":["9.0.3","9.0.3-tuxcare.1","9.0.3-tuxcare.2","9.0.3-tuxcare.3"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792486145.json","tuxcare":{"fixed_version":"9.0.3-tuxcare.4","base_version":"9.0.3"}}}],"schema_version":"1.9.0"}