CLSA-2026-1776818206

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776818206.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1776818206
Upstream
CVE (2)
Published
2026-08-04T14:52:27Z
Modified
2026-10-15T09:45:47Z
Summary
TuxCare security update for jsonwebtoken (2 CVEs)
Details

TuxCare rebuilt jsonwebtoken to address 2 CVEs. Fixed in 0.4.0-tuxcare.6.

Affected packages

TuxCare:npm / jsonwebtoken

Package

Name
jsonwebtoken
Purl
pkg:npm/jsonwebtoken

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0.4.0-tuxcare.0
Fixed
0.4.0-tuxcare.6

Affected versions

0.*
0.4.0-tuxcare.1
0.4.0-tuxcare.2
0.4.0-tuxcare.3
0.4.0-tuxcare.4
0.4.0-tuxcare.5
0.4.0

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/npm/CLSA-2026-1776818206.json"
tuxcare 
{
    "base_version":  "0.4.0",
    "fixed_version":  "0.4.0-tuxcare.6"
}