CLSA-2026-1784596295 TuxCare security update for tough-cookie (2 CVEs)

🗓️ 04 Aug 2026 14:52:45Reported by GoogleType

osv🔗 osv.dev👁 9 Views

TuxCare rebuilds tough-cookie to fix one vulnerability, version 2.2.2-tuxcare.2 released.

Reporter	Title	Published	Views	Family All 322
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in tar-7.5.9.tgz	9 Jun 202615:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	19 Aug 202615:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses tar-7.5.7.tgz, tar-7.5.9.tgz which is vulnerable to CVE-2026-29786	5 May 202612:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by Node.js tough-cookie module vulnerability to a denial of service (CVE-2016-1000232)	15 Jun 201807:08	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: The Pulse App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	30 Jul 202614:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Suite Software includes components with multiple known vulnerabilities	24 Aug 202611:23	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in node-tar affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:30	–	ibm
ATTACKERKB	CVE-2026-29786	7 Mar 202615:32	–	attackerkb

19 Aug 2026 19:21Current

5.8Medium risk

Vulners AI Score5.8

CVSS 25

CVSS 35.3

CVSS 3.16.3 - 8.6

CVSS 48.2

EPSS0.02356

SSVC