CLSA-2026-1784596275 TuxCare security update for http-proxy-middleware (6 CVEs)

🗓️ 04 Aug 2026 14:52:45Reported by GoogleType

osv🔗 osv.dev👁 8 Views

TuxCare updates web proxy middleware to fix six vulnerabilities in version 1.3.1-tuxcare.1.

Reporter	Title	Published	Views	Family All 495
IBM Security Bulletins	Security Bulletin: Node.js lodash vulnerability affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) ( CVE-2019-10744)	22 Feb 202220:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Storage Defender – Data Protect	30 Aug 202317:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	18 Jul 202306:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is impacted by multiple vulnerabilities in Drupal dated modernizr library	25 Aug 202114:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition is vulnerable to Prototype Pollution flaw due to lodash.clonedeep	17 Dec 202510:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities	19 Jun 202517:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in http-proxy-middleware affects IBM watsonx Assistant for IBM Cloud Pak for Data	5 Feb 202520:50	–	ibm
IBM Security Bulletins	Security Bulletin: DevOps Test Performance contains vulnerabilities related to use of the lodash library	17 Apr 202613:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboard and DesignerAuthoring operands are vulnerable to denial of service [CVE-2024-21536]	28 Jan 202522:08	–	ibm

07 Aug 2026 10:02Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.7 - 9.1

CVSS 26.8

CVSS 48.7

EPSS0.21333

SSVC