TuxCare rebuilt nesbot/carbon to address 1 CVE. Fixed in 1.26.6-p1+tuxcare.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2025-1756946896.json"
{ "base_version": "1.26.6", "fixed_version": "1.26.6-p1+tuxcare" }