CLSA-2026-1775003188 TuxCare security update for underscore (2 CVEs)

🗓️ 04 Aug 2026 14:52:18Reported by GoogleType

osv🔗 osv.dev👁 13 Views

TuxCare updates underscore to fix one vulnerability; fixed in version 1.6.0-tuxcare.1.

Reporter	Title	Published	Views	Family All 255
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple node modules.	21 Apr 202618:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-27601)	22 Apr 202614:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	25 Oct 202214:32	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of Underscore.js, IBM DevOps Solution Workbench is affected by a Denial of Service (CVE-2026-27601)	16 Mar 202608:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in JQuery, Node.js and Swagger UI	17 May 202319:40	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2026-27601)	16 Jun 202617:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in underscore-1.13.7.tgz	6 May 202603:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Apache JSON Small and Fast Parser (json-smart) and Underscore affect IBM Spectrum Symphony	6 Jul 202108:20	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found on thirdparty libraries used by IBM® MobileFirst Platform	26 Jan 202317:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Event Processing	22 Jul 202606:55	–	ibm

22 Sep 2026 14:57Current

6.7Medium risk

Vulners AI Score6.7

CVSS 26.5

CVSS 3.13.3 - 7.2

CVSS 48.2

EPSS0.04087

SSVC