CLSA-2026-1785380800 TuxCare security update for protobufjs (4 CVEs)

🗓️ 04 Aug 2026 14:52:50Reported by GoogleType

osv🔗 osv.dev👁 8 Views

TuxCare security update fixes four vulnerabilities in protobufjs and rebuilds it; fixed in 0.12.13-tuxcare.1.

Reporter	Title	Published	Views	Family All 668
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	20 May 202613:41	–	ibm
IBM Security Bulletins	Security Bulletin: Manage Component uses protobufjs-8.0.1.tgz and utf8-1.1.0.tgz in map-component app which is vulnerable to CVE-2026-44288, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293 and CVE-2026-44294	16 Sep 202614:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	26 Jun 202606:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watsonx BI Assistant for CP4D affected by multiple CVEs	11 Aug 202619:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access Digital Credentials	12 Jun 202601:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	17 Jun 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to Node.js modules fast-uri and protobufjs (CVE-2026-6322, CVE-2026-45740 & CVE-2026-6321)	16 Jun 202610:55	–	ibm
attackerkb	CVE-2026-44291	13 May 202614:42	–	attackerkb
attackerkb	CVE-2026-44289	13 May 202614:39	–	attackerkb

07 Aug 2026 10:02Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5 - 8.1

EPSS0.00684

SSVC