PT-2026-74096

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.0-tuxcare.1...

PT-2026-74097

TuxCare rebuilt webpack-dev-server to address 3 CVEs. Fixed in 4.15.1-tuxcare.1...

PT-2026-75634

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 2.7.1-tuxcare.2...

PT-2026-75519

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 4.15.2-tuxcare.2...

PT-2026-75608

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 2.11.5-tuxcare.2...

PT-2026-74826

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 3.11.2-tuxcare.1...

PT-2026-75741

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 2.7.1-tuxcare.3...

PT-2026-74821

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 5.3.3-tuxcare.1...

PT-2026-75607

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 4.11.0-tuxcare.2...

PT-2026-74093

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.7.2-tuxcare.1...

PT-2026-75424

TuxCare rebuilt webpack-dev-server to address 3 CVEs. Fixed in 4.15.2-tuxcare.1...

PT-2026-75722

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 1.10.2-tuxcare.1...

PT-2026-74108

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 4.7.3-tuxcare.1...

PT-2026-74472

TuxCare rebuilt webpack-dev-middleware to address 1 CVE. Fixed in 3.5.1-tuxcare.1...

PT-2026-75781

TuxCare rebuilt webpack-dev-server to address 3 CVEs. Fixed in 2.7.1-tuxcare.4...

PT-2026-74110

TuxCare rebuilt webpack-dev-server to address 2 CVEs. Fixed in 3.11.0-tuxcare.1...

PT-2026-75739

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 2.11.5-tuxcare.3...

PT-2026-75669

TuxCare rebuilt webpack-dev-server to address 1 CVE. Fixed in 3.11.2-tuxcare.2...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package was involved in a supply chain compromise that affected multiple namespaces on the npm registry, including popular caching and key-value storage utilities. A malicious actor compromised a maintainer...

CVE-2026-48031

go-base is a Go RESTful API Boilerplate template with JWT Authentication, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secret is hardcoded to the known string "random", letting any attacker who reads the public repository forge tokens for arbitrary users, including admin...