{"id":"CLSA-2026-1793180903","summary":"TuxCare security update for nodemailer (2 CVEs)","details":"TuxCare rebuilt nodemailer to address 2 CVEs. Fixed in 9.1.0-tuxcare.8.","modified":"2026-10-28T13:45:17.239364269Z","published":"2026-10-28T09:48:23Z","upstream":["CVE-2026-110870","GHSA-g73g-hqqh-jr95"],"affected":[{"package":{"name":"nodemailer","ecosystem":"TuxCare:npm","purl":"pkg:npm/nodemailer"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"9.1.0-tuxcare.0"},{"fixed":"9.1.0-tuxcare.8"}]}],"versions":["9.1.0","9.1.0-tuxcare.1","9.1.0-tuxcare.2","9.1.0-tuxcare.3","9.1.0-tuxcare.4","9.1.0-tuxcare.5","9.1.0-tuxcare.6","9.1.0-tuxcare.7"],"database_specific":{"tuxcare":{"base_version":"9.1.0","fixed_version":"9.1.0-tuxcare.8"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1793180903.json"}}],"schema_version":"1.9.2"}