CLSA-2026-1785204338 TuxCare security update for undici (6 CVEs)

🗓️ 04 Aug 2026 14:52:49Reported by GoogleType

osv🔗 osv.dev👁 4 Views

TuxCare security update for the undici library fixes six security vulnerabilities in version 6.11.1-tuxcare.4.

Reporter	Title	Published	Views	Family All 553
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to node modules Hono and Undici	30 Mar 202612:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses undici which is vulnerable to CVE-2026-11525, CVE-2026-12151, CVE-2026-6733, CVE-2026-9679	3 Aug 202611:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to multiple Node.js modules	31 Jul 202614:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Bob	2 Jun 202614:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM watsonx Code Assistant On Prem	23 Mar 202615:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	31 Mar 202612:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Event Streams	6 Aug 202606:21	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to multiple vulnerabilities in undici	6 May 202611:30	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Jun 202614:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Undici affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:16	–	ibm

07 Aug 2026 10:02Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5 - 9.8

EPSS0.00789

SSVC