{"id":"CLSA-2026-1792604680","summary":"TuxCare security update for socket.io (2 CVEs)","details":"TuxCare rebuilt socket.io to address 2 CVEs. Fixed in 1.7.4-tuxcare.1.","modified":"2026-10-21T20:30:49.850653542Z","published":"2026-10-21T17:44:40Z","upstream":["CVE-2020-28481","CVE-2024-38355"],"affected":[{"package":{"name":"socket.io","ecosystem":"TuxCare:npm","purl":"pkg:npm/socket.io"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.4-tuxcare.0"},{"fixed":"1.7.4-tuxcare.1"}]}],"versions":["1.7.4"],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1792604680.json","tuxcare":{"base_version":"1.7.4","fixed_version":"1.7.4-tuxcare.1"}}}],"schema_version":"1.9.0"}