CLSA-2026-1774225207 TuxCare security update for diff (3 CVEs)

TuxCare rebuilt diff to address 3 CVEs. Fixed in 7.0.0-tuxcare.1...

CLSA-2026-1773879463 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.7.2-tuxcare.1...

CLSA-2026-1773965915 TuxCare security update for js-yaml (7 CVEs)

TuxCare rebuilt js-yaml to address 7 CVEs. Fixed in 3.3.1-tuxcare.1...

CLSA-2026-1773188144 TuxCare security update for form-data (1 CVE)

TuxCare rebuilt form-data to address 1 CVE. Fixed in 1.0.0-rc3-tuxcare.1...

CLSA-2026-1773360972 TuxCare security update for ms (2 CVEs)

TuxCare rebuilt ms to address 2 CVEs. Fixed in 0.7.1-tuxcare.1...

CLSA-2026-1773101690 TuxCare security update for org.bouncycastle (2 CVEs)

TuxCare rebuilt 12 org.bouncycastle packages to address 2 CVEs. Fixed in 1.64-tuxcare.1...

CLSA-2026-1772583201 TuxCare security update for body-parser (1 CVE)

TuxCare rebuilt body-parser to address 1 CVE. Fixed in 1.14.2-tuxcare.1...

CLSA-2025-1754007189 TuxCare security update for aiohttp (2 CVEs)

TuxCare rebuilt aiohttp to address 2 CVEs. Fixed in 3.8.5.post2+tuxcare...

CLSA-2026-1767571924 TuxCare security update for h11 (1 CVE)

TuxCare rebuilt h11 to address 1 CVE. Fixed in 0.9.0.post1+tuxcare...

CLSA-2025-1756858338 TuxCare security update for pyjwt (1 CVE)

TuxCare rebuilt pyjwt to address 1 CVE. Fixed in 2.3.0.post1+tuxcare...

CLSA-2025-1758154333 TuxCare security update for paramiko (1 CVE)

TuxCare rebuilt paramiko to address 1 CVE. Fixed in 3.0.0.post1+tuxcare...

CLSA-2026-1772496674 TuxCare security update for semver (2 CVEs)

TuxCare rebuilt semver to address 2 CVEs. Fixed in 6.3.0-tuxcare.1...

CLSA-2026-1771200578 TuxCare security update for marked (2 CVEs)

TuxCare rebuilt marked to address 2 CVEs. Fixed in 4.0.9-tuxcare.1...

CLSA-2026-1771978232 TuxCare security update for 38 packages (1 CVE)

TuxCare rebuilt 38 packages to address 1 CVE. Fixed in 9.0.90-tuxcare.3...

CLSA-2025-1764634062 TuxCare security update for org.springframework (2 CVEs)

TuxCare rebuilt 24 org.springframework packages to address 2 CVEs. Fixed in 5.3.29-tuxcare.1...

CLSA-2025-1752537764 TuxCare security update for org.springframework (1 CVE)

TuxCare rebuilt 24 org.springframework packages to address 1 CVE. Fixed in 5.3.39.tuxcare.6...

CLSA-2025-1751500955 TuxCare security update for 35 packages (10 CVEs)

TuxCare rebuilt 35 packages to address 10 CVEs. Fixed in 8.5.100.tuxcare.1...

CVE-2026-68494 jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...

CVE-2026-68494

The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking parser is incomplete. This record covers the remaining bypass. The earlier fix wired validateIntegerLength into a new setIntLength helper and invoked it...

EUVD-2026-52701

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to 3.1.3, Flowise record manager and agent memory nodes allowed users to set arbitrary TypeORM DataSource options through the additionalConfig input in...