{"id":"CLSA-2026-1792529137","summary":"TuxCare security update for drupal/core (2 CVEs)","details":"TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 8.9.20-p8+tuxcare.","modified":"2026-10-21T01:30:11.471400919Z","published":"2026-10-20T20:45:37Z","upstream":["CVE-2026-108097","CVE-2026-108515"],"affected":[{"package":{"name":"drupal/core","ecosystem":"TuxCare:Packagist","purl":"pkg:composer/drupal/core"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.9.20"},{"fixed":"8.9.20-p8+tuxcare"}]}],"versions":["8.9.20","8.9.20-p1+tuxcare","8.9.20-p2+tuxcare","8.9.20-p3+tuxcare","8.9.20-p4+tuxcare","8.9.20-p5+tuxcare","8.9.20-p6+tuxcare","8.9.20-p7+tuxcare"],"database_specific":{"tuxcare":{"fixed_version":"8.9.20-p8+tuxcare","base_version":"8.9.20"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1792529137.json"}}],"schema_version":"1.9.0"}