TuxCare rebuilt drupal/core to address 4 CVEs. Fixed in 8.9.20-p2+tuxcare.
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/packagist/CLSA-2026-1785380876.json"